mcl-collection vulnerabilities

Products

• mcl-net firmware 2
• mcl-net 1

Latest mcl-collection CVEs

Newest publication first

1. CVE-2023-4990 Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbitrary files.

   Published 2023-10-11

   High·CVSS 7.5 EPSS 0.65%

   Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbitrary files.

2. CVE-2023-34834 A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" e...

   Published 2023-06-29

   Medium·CVSS 5.3 EPSS 4.0%

   A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.