PatchTheCVEdmasoftlab vulnerabilities
Recent CVEs affecting dmasoftlab products. 3 tracked.
dmasoftlab has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-04-07. Highest priority: CVE-2021-29012 (score 66/100).
- CVE-2021-30147 HIGH 8.8 DOWNGRADE DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
- CVE-2021-29012 CRITICAL 9.8 DOWNGRADE DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session
- CVE-2021-29011 MEDIUM 6.1 DOWNGRADE DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or addre
FAQ
How do I fix dmasoftlab vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dmasoftlab being exploited right now?
None of the tracked dmasoftlab CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dmasoftlab CVE should I patch first?
CVE-2021-29012 currently ranks highest (66/100): DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.