CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

Cross site scripting

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

Authentication flaw

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

Input validation

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15065

CVE-2020-15065 affects the DIGITUS DA-70254 4-Port Gigabit Network Hub (version 2.073.000.E0008). Connected sources describe an input validation error in the device that allows an on‑network attacker to cause a denial‑of‑service by sending excessively long input values. The vulnerability stems fr...

CVE-2020-15064

The CVE-2020-15064 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware 2.073.000.E0008). Multiple connected sources confirm a stored XSS vulnerability in the web UI: an attacker on the same network can leverage administrative privileges to set a crafted server name, triggerin...

CVE-2020-15064

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15063

The CVE-2020-15063 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware version 2.073.000.E0008). The underlying issue is an authorization flaw that allows an attacker on the same network to bypass authentication via a web-management request that omits a password parameter. Pu...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15062

CVE-2020-15062 affects the DIGITUS DA-70254 4-Port Gigabit Network Hub (version 2.073.000.E0008). The root cause is that the admin password can be discovered by sniffing unencrypted UDP traffic on the same network, enabling privilege elevation. Documented impact includes attacker gaining administ...