CVE-2022-40204

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

Score

CVSS 3.1 5.4 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-12-01

Last modified

2025-04-16

Weaknesses

CWE-79

Affected products

• Dasdec (Digital Alert Systems)
• Dasdec I Firmware (Digitalalertsystems)
• Dasdec Ii Firmware (Digitalalertsystems)
• Dasdec Iii Firmware (Digitalalertsystems)
• One-net Firmware (Digitalalertsystems)
• One-net Se Firmware (Digitalalertsystems)

References

• https://www.digitalalertsystems.com/security-advisory