smart asset vulnerabilities and fixes

Recent CVEs affecting smart asset, with upgrade or downgrade steps. 3 tracked.

Also searched as: smartasset.

smart asset has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-10-02. Highest priority: CVE-2020-26525 (score 61/100).

• CVE-2020-26527 CRITICAL 9.8 DOWNGRADE An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7
• CVE-2020-26526 MEDIUM 5.3 DOWNGRADE An issue was discovered in Damstra Smart Asset 2020.7
• CVE-2020-26525 CRITICAL 9.1 DOWNGRADE Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter

FAQ

How do I fix smart asset vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is smart asset being exploited right now?

None of the tracked smart asset CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which smart asset CVE should I patch first?

CVE-2020-26525 currently ranks highest (61/100): Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter.

RSS feed for smart asset · ← Back to latest CVEs