Damstratechnology

CVE-2020-26527 Oct 02, 21:15 CRITICAL POC Act Now

An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-26526 Oct 02, 20:15 MEDIUM This Month

An issue was discovered in Damstra Smart Asset 2020.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2020-26525 Oct 02, 20:15 CRITICAL Act Now

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.