GCVE - cpe:2.3:h:digital_alert_systems:dasdec_eas:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:digital_alert_systems:dasdec_eas:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Digital Alert Systems (`b21367e8-779c-5a76-a06b-ac9b0bd5690e`)
Product	Dasdec Eas (`8e549276-92e8-553f-b3de-8164ec034b40`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4735`	vulnerable	2026-06-08 05:04:49.490047	Details available The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 have a default password for an administrative account, which makes it easier for remote attackers to obtain access via an IP network. Published: 2013-06-29T21:00:00.000Z Updated: 2024-09-17T02:57:08.864Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/AAMN-98MUK2 http://www.kb.cert.org/vuls/id/662676 http://www.kb.cert.org/vuls/id/AAMN-98MU7H http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4734`	vulnerable	2026-06-08 05:04:49.489669	Details available dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 generates predictable passwords, which might make it easier for attackers to obtain non-administrative access via unspecified vectors. Published: 2013-06-29T21:00:00.000Z Updated: 2026-06-02T19:10:12.857Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/AAMN-98MUK2 http://www.kb.cert.org/vuls/id/662676 http://www.kb.cert.org/vuls/id/AAMN-98MU7H http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4733`	vulnerable	2026-06-08 05:04:49.489260	Details available The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 allows remote attackers to obtain sensitive configuration and status information by reading log files. Published: 2013-06-29T21:00:00.000Z Updated: 2026-06-02T19:11:17.241Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/AAMN-98MUK2 http://www.kb.cert.org/vuls/id/662676 http://www.kb.cert.org/vuls/id/AAMN-98MU7H http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4732`	vulnerable	2026-06-08 05:04:49.485633	Details available The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU#662676 states "Monroe Electronics could not reproduce this finding. Published: 2013-06-29T21:00:00.000Z Updated: 2024-09-16T17:54:12.663Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/AAMN-98MU7H http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf http://www.kb.cert.org/vuls/id/662676 http://www.kb.cert.org/vuls/id/AAMN-98MUK2 http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0137`	vulnerable	2026-06-08 05:03:01.802223	Details available The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session. Published: 2013-06-29T21:00:00.000Z Updated: 2024-08-06T14:18:09.572Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/AAMN-98MUK2 http://www.kb.cert.org/vuls/id/662676 http://www.kb.cert.org/vuls/id/AAMN-98MU7H http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.