← Back

Knx Ip Router Firmware

knx_ip_router_firmware

Vendor: Gira • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33276
1Gira
1Knx Ip Router Firmware
Nov 21, 2024
Jun 30, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the r...Show more
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).Show less
CVE-2023-33277
1Gira
1Knx Ip Router Firmware
Nov 21, 2024
Jun 29, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.