Approved changes feed: RSS · Atom

cpe:2.3:h:gira:knx_ip_router:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGira (6767f3d1-1d18-5177-aaf5-132cb8fccd43)
ProductKnx Ip Router (80b975ae-d026-50fe-9f15-16842e517777)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33277 not_vulnerable 2026-06-08 06:06:22.165278 Details available
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-27T15:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33277 vulnerable 2026-06-08 06:06:22.165046 Details available
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-27T15:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33276 not_vulnerable 2026-06-08 06:06:22.164683 Details available
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).
Published: 2023-06-30T00:00:00.000Z
Updated: 2024-11-26T19:49:35.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33276 vulnerable 2026-06-08 06:06:22.162898 Details available
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).
Published: 2023-06-30T00:00:00.000Z
Updated: 2024-11-26T19:49:35.286Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.