PatchTheCVEdanfoss tlx pro\+ vulnerabilities and fixes
Recent CVEs affecting danfoss tlx pro\+, with upgrade or downgrade steps. 3 tracked.
Also searched as: danfosstlxpro\+.
danfoss tlx pro\+ has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-09-26. Highest priority: CVE-2015-6474 (score 35/100).
- CVE-2015-6475 MEDIUM 4.3 MITIGATE MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow r
- CVE-2015-6474 MEDIUM 5.0 MITIGATE MITIGATE IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by read
- CVE-2015-6469 MEDIUM 5.0 MITIGATE MITIGATE The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote attackers to discover script
FAQ
How do I fix danfoss tlx pro\+ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is danfoss tlx pro\+ being exploited right now?
None of the tracked danfoss tlx pro\+ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which danfoss tlx pro\+ CVE should I patch first?
CVE-2015-6474 currently ranks highest (35/100): IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by read.