Nettec AS vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nettec AS products: 1 record(s), with severity, exploitation and fixes.

Digi On-Prem Manager 1

Exploited only (KEV) →

CVE-2025-13319 High · 8.8 CWE-20 Nov 17, 2025

Authenticated SQL injection in API - Digi On-Prem Manager

An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required to perform the attack.