Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Dragino records in CISA KEVNo Dragino vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00752 · Published 2022-12-12 · No fix listed CWE-552
Priority LOW 16
Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page.
CVSS 3.1LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00231 · Published 2022-12-12 · No fix listed CWE-352
