ddc4020e_firmware vulnerabilities
2 known vulnerabilities in ddc4020e_firmware from Kieback&Peter. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest first
- 8.4 High severity
DDC4040e: Insufficiently Protected Credentials
Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.
- 9.8 Critical severity
DDC4040e: Improper Limitation of a Pathname to a Restricted Directory
Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.