Vendors / Holger Schurig Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Holger Schurig records in CISA KEV No Holger Schurig vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 33
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.
CVSS 2.0 MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0224 · Published 2009-03-30 · No fix listed CWE-94
Priority LOW 28
DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02455 · Published 2009-03-30 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0