Diris A-40 Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2019-15859

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.

9.8CVSS

9.1AI Score

0.165EPSS

2019-10-09 04:15 PM