Description
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
References (1)
Core 1
Core References
Broken Link, Third Party Advisory x_refsource_misc
https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/
Scores
CVSS v3
8.8
EPSS
0.0032
EPSS Percentile
23.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-319
CWE-522
Status
published
Products (1)
digitus/da-70254_firmware
2.073.000.e0008
Published
Aug 07, 2020
Tracked Since
Feb 18, 2026