Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-11-29 · No fix listed
Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-11-29 · No fix listed
Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-11-29 · No fix listed
Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-11-29 · No fix listed
Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-11-29 · No fix listed
Priority MEDIUM 50
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00752 · Published 2024-11-29 · No fix listed
Priority HIGH 82
An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01131 · Published 2024-10-21 · No fix listed CWE-77