Ddrt

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ddrt records in CISA KEV

No Ddrt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dashcom Live Firmware 2 records LOW

Records

2 records in Dashcom Live Firmware · all components

TI-2019-08237 CVE-2019-11020 · GHSA-44wq-7fm8-j2j2

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows…

LOW 36

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claim_files/claim_id_ URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01477 Published 2019-07-09 No fix listed CWE-306

TI-2019-08236 CVE-2019-11019 · GHSA-97q2-639j-cqv6

Lack of authentication in case-exporting components in DDRT Dashcom Live through…

LOW 36

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/all_claim_detail.php?claim_id= URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01477 Published 2019-07-09 No fix listed CWE-306

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0