PatchTheCVEinvigo vulnerabilities
Recent CVEs affecting invigo products. 6 tracked.
invigo has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2021-03-25. Highest priority: CVE-2020-10582 (score 63/100).
- CVE-2020-10584 HIGH 7.5 UPGRADE A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5
- CVE-2020-10583 HIGH 8.8 UPGRADE The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticat
- CVE-2020-10582 CRITICAL 9.8 UPGRADE A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.
- CVE-2020-10581 HIGH 7.5 UPGRADE Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Ma
- CVE-2020-10580 HIGH 8.8 UPGRADE A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0
- CVE-2020-10579 HIGH 7.5 UPGRADE A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0
FAQ
How do I fix invigo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is invigo being exploited right now?
None of the tracked invigo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which invigo CVE should I patch first?
CVE-2020-10582 currently ranks highest (63/100): A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5..