Vulnerabilidades de Dingtian-tech
CVEs publicadas que afetam produtos de Dingtian-tech: 2 registro(s), com severidade, exploração e correções.
CVE-2025-10880
Alta · 7.5
CWE-522 25/09/2025
Insufficiently Protected Credentials in Dingtian DT-R002
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.
CVE-2025-10879
Média · 5.3
CWE-522 25/09/2025
Insufficiently Protected Credentials in Dingtian DT-R002
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication.