Read the docs

IPCOMM

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

IPCOMM records in CISA KEV

No IPCOMM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Ipdio Firmware · all components

TI-2022-08722 CVE-2022-24915 · GHSA-vp3m-wwp8-x3hf

ICSA-22-062-01 IPCOMM ipDIO

Priority MEDIUM 42

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section where t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01013 Published 2022-03-09 No fix listed CWE-94
TI-2022-07160 CVE-2022-22985 · GHSA-8v3j-rhwm-r3pc

ICSA-22-062-01 IPCOMM ipDIO

Priority MEDIUM 42

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web sectio…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01042 Published 2022-03-09 No fix listed CWE-94
TI-2022-05549 CVE-2022-21146 · GHSA-cvqf-ghfm-xpr4

ICSA-22-062-01 IPCOMM ipDIO

Priority LOW 30

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00907 Published 2022-03-09 No fix listed CWE-79
TI-2022-08305 CVE-2022-24432 · GHSA-jgvg-vxx8-m383

ICSA-22-062-01 IPCOMM ipDIO

Priority LOW 26

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00654 Published 2022-03-09 No fix listed CWE-79
Open these records in search →