PatchTheCVEdominaplus vulnerabilities and fixes
Recent CVEs affecting dominaplus, with upgrade or downgrade steps. 3 tracked.
dominaplus has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-04-28. Highest priority: CVE-2020-21994 (score 67/100).
- CVE-2020-21996 HIGH 7.5 UPGRADE MITIGATE AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution
- CVE-2020-21994 CRITICAL 9.8 UPGRADE MITIGATE AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenti
- CVE-2020-21991 CRITICAL 9.8 UPGRADE MITIGATE AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when
FAQ
How do I fix dominaplus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dominaplus being exploited right now?
None of the tracked dominaplus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dominaplus CVE should I patch first?
CVE-2020-21994 currently ranks highest (67/100): AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenti.