Advisories · Technology
Dan-in-CA SIP.
Every CVE that names Dan-in-CA SIP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection
- Dan-in-CA SIP
- Command injection
- CVSS 6.3 Medium
Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL
- Dan-in-CA SIP
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters
- Dan-in-CA SIP
- Broken access control
- CVSS 8.7 High
Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore
- Dan-in-CA SIP
- Path traversal
- CVSS 7.0 High
Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests
- Dan-in-CA SIP
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name
- Dan-in-CA SIP
- Cross-site scripting (XSS)