Login Request a demo
DF
Product
Dl4343 Firmware
by Netis-systems · last CVE Dec 30, 2019
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 1Medium 6Low 0
Severity
All severities7Critical0High1Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dl4343 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-20074
8.8
1%
Dec 30
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page
Affected: All versions, or not specified
CVE-2019-20071
6.5
1%
Dec 30
On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs
Affected: All versions, or not specified
CVE-2019-20076
6.1
2%
Dec 30
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration)
Affected: All versions, or not specified
CVE-2019-20075
6.1
2%
Dec 30
On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic)
Affected: All versions, or not specified
CVE-2019-20073
6.1
2%
Dec 30
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration)
Affected: All versions, or not specified
CVE-2019-20072
6.1
2%
Dec 30
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration)
Affected: All versions, or not specified
CVE-2019-20070
6.1
1%
Dec 30
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration)
Affected: All versions, or not specified
Showing 7