Gira

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 5
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2023-33276

    The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).

    Last Modified: Nov 26, 2024
    Published: Jun 30, 2023

    CVE-2023-33277

    The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.

    Last Modified: Nov 27, 2024
    Published: Jun 29, 2023

    CVE-2023-2739

    Gira HomeServer hslist cross site scripting

    Last Modified: Nov 21, 2024
    Published: May 16, 2023

    CVE-2020-10795

    Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access.

    Last Modified: Nov 21, 2024
    Published: May 07, 2020

    CVE-2020-10794

    Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root access.

    Last Modified: Nov 21, 2024
    Published: May 07, 2020
    Items Per Page