PatchTheCVEone-net firmware vulnerabilities and fixes
Recent CVEs affecting one-net firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: one net firmware, one-netfirmware.
one-net firmware has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-12-01. Highest priority: CVE-2019-18265 (score 27/100).
- CVE-2022-40204 MEDIUM 4.1 MITIGATE MITIGATE A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC soft
- CVE-2019-18265 MEDIUM 4.7 UPGRADE UPGRADE Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerabilit
FAQ
How do I fix one-net firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is one-net firmware being exploited right now?
None of the tracked one-net firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which one-net firmware CVE should I patch first?
CVE-2019-18265 currently ranks highest (27/100): Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerabilit.