Critical severity10.0NVD Advisory· Published Mar 27, 2020· Updated Jun 17, 2026
CVE-2020-3936
CVE-2020-3936
Description
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:unisoon:ultralog_express_firmware:1.4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:unisoon:ultralog_express_firmware:1.4.0:*:*:*:*:*:*:*
- (no CPE)range: 1.4.0
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-3451-7d9f0-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.