Read the docs

devolo AG

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

devolo AG records in CISA KEV

No devolo AG vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2019-15303 CVE-2019-25249 · GHSA-p782-2pf9-qvmm

devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr

Priority HIGH 73

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0042 Published 2025-12-24 No fix listed CWE-266
TI-2019-15285 CVE-2019-25231 · GHSA-4q82-9j8m-c42w

devolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation

Priority HIGH 72

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-01-07 No fix listed CWE-428
TI-2019-15304 CVE-2019-25250 · GHSA-vq8q-pgj7-r79w

Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery

Priority MEDIUM 56

Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00164 Published 2025-12-24 No fix listed CWE-352
Open these records in search →