Read the docs

Dan-in-CA

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Dan-in-CA records in CISA KEV

No Dan-in-CA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority HIGH 81

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute ar…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.04404 Published 2026-07-14 No fix listed CWE-78
Priority HIGH 77

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading craft…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00499 Published 2026-07-14 No fix listed CWE-22
Priority HIGH 77

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter n…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00511 Published 2026-07-14 No fix listed CWE-915
Priority HIGH 67

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00376 Published 2026-07-14 No fix listed CWE-918
Priority MEDIUM 64

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in adminis…

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00271 Published 2026-07-14 No fix listed CWE-352
Priority LOW 24

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payload…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00311 Published 2026-07-14 No fix listed CWE-79
Open these records in search →