CVE-2022-1410
Published Aug 17, 2022OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This…
Vendor archive
device42 CVEs
Beta · best-effort6 CVEs tagged to vendor device42 — 1 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-1401
Published Aug 17, 2022Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive s…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-1400
Published Aug 17, 2022Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an attacker to leak ses…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-1399
Published Aug 17, 2022An Argument Injection or Modification vulnerability in the "Change Secret" username field as used in the Discovery component of Device42 CMDB allows a local attacker to run arbitr…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-41316
Published Sep 17, 2021The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can…
CVE-2021-41315
Published Sep 17, 2021The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console appl…
Showing 1-6 of 6 CVEsPage 1 of 1