Vulnerabilities

TI-2022-23600 CVE-2022-47526 · GHSA-3rw5-8gq9-qr7c

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability…

MEDIUM 51

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01302 Published 2023-05-30 No fix listed CWE-22

TI-2022-23599 CVE-2022-47525 · GHSA-j49c-jwhf-pgwq

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in…

MEDIUM 40

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2023-05-30 No fix listed CWE-369

TI-2014-01873 CVE-2014-2358 · GHSA-rr64-xw2h-xw8j

Fox-IT DataDiode Appliance CSRF

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of ad…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00574 Published 2014-10-19 Fixed in 1.7.2 CWE-352

Vulnerabilities

Filters

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability…

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in…

Fox-IT DataDiode Appliance CSRF