Vulnerabilities

TI-2023-16438 CVE-2023-33276 · GHSA-6hg6-m9cf-pj98

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds…

MEDIUM 60

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2023-06-30 No fix listed CWE-79

TI-2023-16439 CVE-2023-33277 · GHSA-q68r-994w-38vq

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a…

HIGH 72

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01256 Published 2023-06-29 No fix listed CWE-22

TI-2023-02566 CVE-2023-2739 · GHSA-r222-6q9g-76hh

Gira HomeServer hslist cross site scripting

LOW 28

A vulnerability classified as problematic was found in Gira HomeServer up to 4.12.0.220829 beta.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0045 Published 2023-05-16 No fix listed CWE-79

TI-2020-08688 CVE-2020-10795 · GHSA-m2w4-7552-957p

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the…

LOW 38

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03808 Published 2020-05-07 No fix listed CWE-78

TI-2020-08687 CVE-2020-10794 · GHSA-cwqx-xrfh-m9p5

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows…

MEDIUM 45

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01446 Published 2020-05-07 No fix listed CWE-22