DX-2100-L1-CN
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-0432 | Cri | 0.59 | 9.0 | 0.01 | Mar 31, 2023 | The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web… | ||
| CVE-2022-42140 | Hig | 0.47 | 7.2 | 0.02 | Dec 14, 2022 | Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/net_diagnose. | ||
| CVE-2022-42141 | Med | 0.35 | 5.4 | 0.00 | Dec 14, 2022 | Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting (XSS) via lform/urlfilter. |
- risk 0.59cvss 9.0epss 0.01
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web…
- risk 0.47cvss 7.2epss 0.02
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/net_diagnose.
- risk 0.35cvss 5.4epss 0.00
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting (XSS) via lform/urlfilter.