PatchTheCVEd5 firmware vulnerabilities and fixes
Recent CVEs affecting d5 firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: d5firmware.
d5 firmware has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-01-06. Highest priority: CVE-2019-16273 (score 60/100).
- CVE-2019-16274 HIGH 7.5 UPGRADE UPGRADE DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
- CVE-2019-16273 CRITICAL 9.8 UPGRADE UPGRADE DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb)
- CVE-2019-16272 CRITICAL 9.8 UPGRADE UPGRADE On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge
- CVE-2019-16271 MEDIUM 5.3 UPGRADE UPGRADE DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via s
FAQ
How do I fix d5 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is d5 firmware being exploited right now?
None of the tracked d5 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which d5 firmware CVE should I patch first?
CVE-2019-16273 currently ranks highest (60/100): DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb).