automatic device management vulnerabilities and fixes

Recent CVEs affecting automatic device management, with upgrade or downgrade steps. 6 tracked.

Also searched as: automaticdevicemanagement.

automatic device management has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2021-03-25. Highest priority: CVE-2020-10582 (score 63/100).

CVE-2020-10584 HIGH 7.5 UPGRADE A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5
CVE-2020-10583 HIGH 8.8 UPGRADE The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticat
CVE-2020-10582 CRITICAL 9.8 UPGRADE A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.
CVE-2020-10581 HIGH 7.5 UPGRADE Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Ma
CVE-2020-10580 HIGH 8.8 UPGRADE A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0
CVE-2020-10579 HIGH 7.5 UPGRADE A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0

FAQ

How do I fix automatic device management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is automatic device management being exploited right now?

None of the tracked automatic device management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which automatic device management CVE should I patch first?

CVE-2020-10582 currently ranks highest (63/100): A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5..

RSS feed for automatic device management · ← Back to latest CVEs