F-logic records
9 published records for vendor f-logic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2024-25830Proof of concept | F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.f-logic · datacube3 firmware · CWE-22 | Critical9.8 | — | 24.0% | Feb 28, 2024 |
45Plan | CVE-2024-31750Proof of concept | SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.f-logic · datacube3 firmware · CWE-89 | Critical9.8 | — | 19.2% | Apr 18, 2024 |
43Plan | CVE-2024-34854No exploit | F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`f-logic · datacube3 firmware · CWE-22 | Critical9.8 | — | 12.7% | May 28, 2024 |
40Plan | CVE-2024-25833No exploit | F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitf-logic · datacube3 · CWE-89 | Critical9.8 | — | 2.8% | Feb 28, 2024 |
39Monitor | CVE-2024-25832Proof of concept | F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of danf-logic · datacube3 · CWE-434 | High8.8 | — | 12.8% | Feb 28, 2024 |
30Monitor | CVE-2023-5329No exploit | Field Logic DataCube4 Web API improper authenticationf-logic · datacube4 firmware · CWE-287 | High7.5 | — | 0.8% | Oct 1, 2023 |
28Monitor | CVE-2024-7066No exploit | F-logic DataCube3 HTTP POST Request config_time_sync.php os command injectionf-logic · datacube3 firmware · CWE-78 | Medium6.9 | — | 3.3% | Jul 24, 2024 |
25Monitor | CVE-2024-34852No exploit | F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transf-logic · datacube3 firmware · CWE-77 | Medium6.3 | — | 1.6% | May 28, 2024 |
21Monitor | CVE-2024-25831No exploit | F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization.f-logic · datacube3 · CWE-79 | Medium5.4 | — | 0.5% | Feb 28, 2024 |
- CVE-2024-2583046Plan
F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction.
CriticalCVSS 9.8Proof of conceptEPSS 24%f-logic · datacube3 firmwareFeb 28, 2024
- CVE-2024-3175045Plan
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.
CriticalCVSS 9.8Proof of conceptEPSS 19%f-logic · datacube3 firmwareApr 18, 2024
- CVE-2024-3485443Plan
F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
CriticalCVSS 9.8No exploitEPSS 12%f-logic · datacube3 firmwareMay 28, 2024
- CVE-2024-2583340Plan
F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbit
CriticalCVSS 9.8No exploitEPSS 2%f-logic · datacube3Feb 28, 2024
- CVE-2024-2583239Monitor
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dan
HighCVSS 8.8Proof of conceptEPSS 12%f-logic · datacube3Feb 28, 2024
- CVE-2023-532930Monitor
Field Logic DataCube4 Web API improper authentication
HighCVSS 7.5No exploitEPSS 0%f-logic · datacube4 firmwareOct 1, 2023
- CVE-2024-706628Monitor
F-logic DataCube3 HTTP POST Request config_time_sync.php os command injection
MediumCVSS 6.9No exploitEPSS 3%f-logic · datacube3 firmwareJul 24, 2024
- CVE-2024-3485225Monitor
F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/trans
MediumCVSS 6.3No exploitEPSS 1%f-logic · datacube3 firmwareMay 28, 2024
- CVE-2024-2583121Monitor
F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization.
MediumCVSS 5.4No exploitEPSS 0%f-logic · datacube3Feb 28, 2024