Vulnerabilities

TI-2020-11164 CVE-2020-14293 · GHSA-fmjp-4h8h-4q4c

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands…

MEDIUM 41

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.05261 Published 2020-10-02 No fix listed CWE-78

TI-2019-13503 CVE-2019-18664 · GHSA-pvh4-gjhh-928v

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

LOW 25

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00575 Published 2019-11-02 No fix listed CWE-79

TI-2019-13504 CVE-2019-18665 · GHSA-qw3w-r9fv-chx3

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

MEDIUM 49

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15434 Published 2019-11-02 No fix listed CWE-22

Vulnerabilities

Filters

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands…

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.