Advisories · Technology

Device42 CMDB.

Every CVE that names Device42 CMDB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-1401 CVE record

CVSS 6.9 Medium

Insufficient validation of provided paths in Exago WrImageResource.axd
- Device42 CMDB
- Broken access control
Not analysed yet 16 Aug 2022
CVE-2022-1410 CVE record

CVSS 8.0 High

Remote Code Execution in Device42 ApplianceManager console
- Device42 CMDB
- Command injection
Not analysed yet 16 Aug 2022
CVE-2022-1400 CVE record

CVSS 7.1 High

Hardcoded encryption key IV in Exago WebReportsApi.dll
- Device42 CMDB
- Hard-coded credentials
Not analysed yet 16 Aug 2022
CVE-2022-1399 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Remote code execution in scheduled tasks component
- Device42 CMDB
- Command injection
Not analysed yet 16 Aug 2022