HIGH🇵🇱 Wersja polska

CVE-2022-26516

CVSS 8.4v3.1pub. 2022-04-20upd. 2024-11-21

Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deployment.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

  • Redlion Da50n

    HW
    Redlion
    all versions

  • Redlion Da50n Firmware

    OS
    Redlion
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-1039CRITICAL9.6PL ✓same product

Słabe hasła w Red Lion DA50N umożliwiają przejęcie urządzenia

CVE-2022-27179MEDIUM4.6same product

A malicious actor having access to the exported configuration file may obtain the stored credentials and there...

CVE-2020-27285CRITICAL9.1PL ✓same vendor

Red Lion Crimson 3.1 — dostęp do bazy danych bez uwierzytelnienia

CVE-2020-16204CRITICAL9.8PL ✓same vendor

Ukryty interfejs w Red Lion N-Tron 702-W umożliwia wykonanie komend jako root

CVE-2020-16206CRITICAL9.0PL ✓same vendor

Stored XSS umożliwiający RCE w Red Lion N-Tron 702-W / 702M12-W