← Back

One Net Firmware

one-net_firmware

Vendor: Digitalalertsystems • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-40204
1Digitalalertsystems
5Dasdec I Firmware
Dasdec Ii FirmwareDasdec Iii Firmware+2 more
Jun 17, 2026
Dec 1, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.
CVE-2019-18265
1Digitalalertsystems
5Dasdec I Firmware
Dasdec Ii FirmwareDasdec Iii Firmware+2 more
Jun 17, 2026
Nov 30, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of...Show more
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in logs and rendered when viewed in the web application.Show less