Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: devolo AG Clear all filters
TI-2019-15285 CVE-2019-25231 · GHSA-4q82-9j8m-c42w

devolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation

Priority HIGH 72

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-01-07 No fix listed CWE-428
TI-2019-15304 CVE-2019-25250 · GHSA-vq8q-pgj7-r79w

Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery

Priority MEDIUM 56

Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00164 Published 2025-12-24 No fix listed CWE-352
TI-2019-15303 CVE-2019-25249 · GHSA-p782-2pf9-qvmm

devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr

Priority HIGH 73

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0042 Published 2025-12-24 No fix listed CWE-266