Known Vulnerabilities for Dl4343 Firmware by Netis-systems
Listed below are 7 of the newest known vulnerabilities associated with "Dl4343 Firmware" by "Netis-systems".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-20076 json | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuratio... | 6.1 - MEDIUM | 2019-12-30 | 2020-01-02 |
| CVE-2019-20075 json | On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic). | 6.1 - MEDIUM | 2019-12-30 | 2020-01-02 |
| CVE-2019-20074 json | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the f... | 8.8 - HIGH | 2019-12-30 | 2020-08-24 |
| CVE-2019-20073 json | On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration). | 6.1 - MEDIUM | 2019-12-30 | 2020-01-02 |
| CVE-2019-20072 json | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration). | 6.1 - MEDIUM | 2019-12-30 | 2020-01-02 |
| CVE-2019-20071 json | On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs. | 6.5 - MEDIUM | 2019-12-30 | 2020-01-02 |
| CVE-2019-20070 json | On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Conf... | 6.1 - MEDIUM | 2019-12-30 | 2020-01-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Netis-systems | Dl4343 Firmware | - |