nedi vulnerabilities and fixes

Recent CVEs affecting nedi, with upgrade or downgrade steps. 19 tracked.

nedi has 19 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-10-06. Highest priority: CVE-2022-40895 (score 62/100).

• CVE-2022-40895 CRITICAL 9.1 UPGRADE UPGRADE In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthe
• CVE-2021-26753 CRITICAL 9.9 DOWNGRADE NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System
• CVE-2021-26752 HIGH 8.8 DOWNGRADE NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on t
• CVE-2021-26751 HIGH 8.8 DOWNGRADE NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the en
• CVE-2020-15037 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15036 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15035 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15034 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15033 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15032 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15031 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15030 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15029 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack
• CVE-2020-15028 MEDIUM 5.4 DOWNGRADE NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack
• CVE-2020-15017 MEDIUM 6.1 DOWNGRADE NeDi 1.9C is vulnerable to reflected cross-site scripting
• CVE-2020-15016 MEDIUM 6.1 DOWNGRADE NeDi 1.9C is vulnerable to reflected cross-site scripting
• CVE-2020-14414 HIGH 8.8 DOWNGRADE NeDi 1.9C is vulnerable to Remote Command Execution
• CVE-2020-14413 MEDIUM 6.1 DOWNGRADE NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php
• CVE-2020-14412 HIGH 8.8 DOWNGRADE NeDi 1.9C is vulnerable to Remote Command Execution

FAQ

How do I fix nedi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is nedi being exploited right now?

None of the tracked nedi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which nedi CVE should I patch first?

CVE-2022-40895 currently ranks highest (62/100): In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthe.

RSS feed for nedi · ← Back to latest CVEs