CyberSecBulletin

C-DATA vulnerabilities

We track 2 vulnerabilities in C-DATA products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest C-DATA vulnerabilities

  • 7.5 High severity

    Web Management System: Improper Access Control

    CVE-2023-3305C-DATA

    A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulat

  • 9.8 Critical severity

    Web Management System: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-4257C-DATAEPSS 43.9%

    A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argum