PatchTheCVEvd 1 firmware vulnerabilities and fixes
Recent CVEs affecting vd 1 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: vd1firmware.
vd 1 firmware has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-08-29. Highest priority: CVE-2019-13405 (score 66/100).
- CVE-2019-13408 HIGH 7.5 UPGRADE UPGRADE A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230
- CVE-2019-13407 MEDIUM 6.1 UPGRADE UPGRADE A XSS found in Advan VD-1 firmware versions up to 230
- CVE-2019-13406 HIGH 7.5 UPGRADE A broken access control vulnerability found in Advan VD-1 firmware versions up to 230
- CVE-2019-13405 CRITICAL 9.8 MITIGATE A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service
- CVE-2019-11064 CRITICAL 9.8 UPGRADE UPGRADE A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230
FAQ
How do I fix vd 1 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vd 1 firmware being exploited right now?
None of the tracked vd 1 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vd 1 firmware CVE should I patch first?
CVE-2019-13405 currently ranks highest (66/100): A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service.