Netis-systems
Netis-systems Dl4343 Firmware: vulnerabilidades y CVE
Netis-systems Dl4343 Firmware tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-20076 | Media (6.1) | 1.5% | — | 30 dic 2019 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration). |
| CVE-2019-20075 | Media (6.1) | 1.8% | — | 30 dic 2019 | On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic). |
| CVE-2019-20074 | Alta (8.8) | 1.4% | — | 30 dic 2019 | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. |
| CVE-2019-20073 | Media (6.1) | 1.8% | — | 30 dic 2019 | On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration). |
| CVE-2019-20072 | Media (6.1) | 1.5% | — | 30 dic 2019 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration). |
| CVE-2019-20071 | Media (6.5) | 0.77% | — | 30 dic 2019 | On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs. |
| CVE-2019-20070 | Media (6.1) | 1.4% | — | 30 dic 2019 | On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration). |