Read the docs

Digitalalertsystems

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Digitalalertsystems records in CISA KEV

No Digitalalertsystems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dasdec I Firmware 2 records LOW Dasdec Ii Firmware 2 records LOW Dasdec Iii Firmware 2 records LOW One-net Firmware 2 records LOW One-net Se Firmware 2 records LOW

Records

2 records in One-net Firmware · all components

TI-2022-19070 CVE-2022-40204 · GHSA-26cq-q9jv-w39f

Cross-site scripting in Digital Alert Systems DASDEC

Priority LOW 25

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00376 Published 2022-11-30 No fix listed CWE-79
TI-2019-13278 CVE-2019-18265 · GHSA-9qj4-8pgw-5j87

Cross-site scripting in Digital Alert Systems DASDEC

Priority LOW 25

Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00484 Published 2022-11-30 Fixed in 4.1 CWE-79
Open these records in search →