Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub Input Validation Error Vulnerability

The Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub is a Gigabit network hub from Assmann Electronic, Germany. An input validation error vulnerability exists in Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub version 2.073.000.E0008. The vulnerability arises from the...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15064

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15064

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

Cross site scripting

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

Input validation

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15065

CVE-2020-15065 affects the DIGITUS DA-70254 4-Port Gigabit Network Hub (version 2.073.000.E0008). Connected sources describe an input validation error in the device that allows an on‑network attacker to cause a denial‑of‑service by sending excessively long input values. The vulnerability stems fr...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15064

The CVE-2020-15064 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware 2.073.000.E0008). Multiple connected sources confirm a stored XSS vulnerability in the web UI: an attacker on the same network can leverage administrative privileges to set a crafted server name, triggerin...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15063

The CVE-2020-15063 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware version 2.073.000.E0008). The underlying issue is an authorization flaw that allows an attacker on the same network to bypass authentication via a web-management request that omits a password parameter. Pu...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...