Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
DuraComm Corporation records in CISA KEVNo DuraComm Corporation vulnerabilities are listed in CISA KEV.
Priority MEDIUM 43
DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00142 · Published 2025-07-22 · No fix listed CWE-319
Priority LOW 38
DuraComm SPM-500 DP-10iN-100-MU lacks access controls for a function that should require user authentication.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00402 · Published 2025-07-22 · No fix listed CWE-306
Priority LOW 32
DuraComm SPM-500 DP-10iN-100-MU is vulnerable to a cross-site scripting attack.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2025-07-22 · No fix listed CWE-79
