GCVE - cpe:2.3:h:avtech:dgm1104:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:avtech:dgm1104:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Avtech (`064374b9-08a7-5b62-a2bd-77f43f7d6e76`)
Product	Dgm1104 (`0096d4db-317a-5250-8733-4a546fc5d910`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-57202`	not_vulnerable	2026-06-08 07:33:15.819395	Details available A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T16:11:58.668Z Open on db.gcve.eu Reference links https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57202	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-57201`	not_vulnerable	2026-06-08 07:33:15.819128	Details available AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T16:11:54.193Z Open on db.gcve.eu Reference links https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57201	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-57200`	not_vulnerable	2026-06-08 07:33:15.818747	Details available AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the test_mail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T16:11:50.176Z Open on db.gcve.eu Reference links https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57200	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-57199`	not_vulnerable	2026-06-08 07:33:15.818449	Details available AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T16:11:46.292Z Open on db.gcve.eu Reference links https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57199	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-57198`	not_vulnerable	2026-06-08 07:33:15.817957	Details available AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T16:11:42.471Z Open on db.gcve.eu Reference links https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57198	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.