Vulnerabilities

TI-2019-12246 CVE-2019-16271 · GHSA-8gp2-x632-2gwr

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard…

LOW 27

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01589 Published 2020-01-06 No fix listed CWE-306

TI-2019-12247 CVE-2019-16272 · GHSA-f5hg-c5v9-hv9c

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and…

MEDIUM 44

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2020-01-06 No fix listed CWE-1188

TI-2019-12248 CVE-2019-16273 · GHSA-x7cq-cqf3-v9jr

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through…

MEDIUM 47

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02327 Published 2020-01-06 No fix listed

TI-2019-12249 CVE-2019-16274 · GHSA-hh8p-75wq-65pv

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.

LOW 34

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2020-01-06 No fix listed CWE-319

Vulnerabilities

Filters

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard…

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and…

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through…

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.