PT-2020-13960

Name of the Vulnerable Software and Affected Versions Secudos DOMOS version 5.8 Description The issue allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field, which can be obtained from the web interface. This is related to the conf datetime in...

CVE-2020-14293: Improper Neutralization of Special Elements used in an OS Command

confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...

DOMOS 5.8 Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-025 Product: DOMOS Manufacturer: Secudos GmbH Affected Versions: = DOMOS 5.8 Tested Versions: DOMOS 5.8 Vulnerability Type: OS Command Injection CWE-78 Risk Level: Low Solution Status: Solved Manufacturer Notification:...

Exploit for OS Command Injection in Secudos Domos

CVE-2020-14293 This vulnerablity was discovered and disclosed...

SECUDOS DOMOS Log Module Directory Traversal Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A directory traversal vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6, which can be exploited by an attacker to read arbitrary files on the system by sending...

SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Cross site scripting

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Design/Logic Flaw

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

SECUDOS DOMOS (before 5.6) is affected by CVE-2019-18665 via the Log module, enabling Local File Inclusion. Multiple sources confirm an LFI exists in the Log module that could let an attacker read arbitrary server files. Impact is read access to sensitive files; no exploitation details are provid...

CVE-2019-18664: Improper Neutralization of Input During Web Page Generation

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665: Improper Limitation of a Pathname to a Restricted Directory

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

PT-2019-15566

Name of the Vulnerable Software and Affected Versions SECUDOS DOMOS versions prior to 5.6 Description The issue concerns the Log module in SECUDOS DOMOS, which allows local file inclusion. Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue...

PT-2019-15565

Name of the Vulnerable Software and Affected Versions SECUDOS DOMOS versions prior to 5.6 Description The issue affects the Log module, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue...