PatchTheCVEboodskap vulnerabilities
Recent CVEs affecting boodskap products. 3 tracked.
boodskap has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-13. Highest priority: CVE-2022-35135 (score 51/100).
- CVE-2022-35136 MEDIUM 6.5 DOWNGRADE Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.
- CVE-2022-35135 HIGH 8.8 DOWNGRADE Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/use
- CVE-2022-35134 MEDIUM 5.4 DOWNGRADE Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.
FAQ
How do I fix boodskap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is boodskap being exploited right now?
None of the tracked boodskap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which boodskap CVE should I patch first?
CVE-2022-35135 currently ranks highest (51/100): Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/use.