Dorsett Controls

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dorsett Controls records in CISA KEV

No Dorsett Controls vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Infoscan 3 records LOW

Records

3 records in Infoscan · all components

TI-2024-28389 CVE-2024-42408 · GHSA-8h54-xh89-c57v

Dorsett Controls InfoScan Path Traversal

LOW 37

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to additional information exposure.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00384 Published 2024-08-08 No fix listed CWE-22

TI-2024-28461 CVE-2024-42493 · GHSA-6jjg-3cm7-jjfj

Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor

LOW 36

Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00312 Published 2024-08-08 No fix listed CWE-200

TI-2024-26246 CVE-2024-39287 · GHSA-28pp-675x-rf35

Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor

LOW 36

Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains passwords and API keys.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2024-08-08 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0