ICP DAS vulnerabilities
We track 2 vulnerabilities in ICP DAS products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest ICP DAS vulnerabilities
- 7.4 High severity
UA-2200: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The
- 8.8 High severity
ET-7060: Unrestricted Upload of File with Dangerous Type
This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device.