Vendors / Gira Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Gira records in CISA KEV No Gira vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01256 · Published 2023-06-29 · No fix listed CWE-22
Priority MEDIUM 60
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00476 · Published 2023-06-30 · No fix listed CWE-79
Priority MEDIUM 45
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01446 · Published 2020-05-07 · No fix listed CWE-22
Priority LOW 38
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03808 · Published 2020-05-07 · No fix listed CWE-78
Priority LOW 28
A vulnerability classified as problematic was found in Gira HomeServer up to 4.12.0.220829 beta.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0045 · Published 2023-05-16 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 2 0 0
THREATIST.IORead the docs