Approved changes feed: RSS · Atom

cpe:2.3:o:dragino:lg01_lora_firmware:4.3.4:*:*:*:*:*:*:*

part: o version: 4.3.4 update: *

VendorDragino (a77fdaa1-3019-58cb-88b6-cdd5dbdc08bb)
ProductLg01 Lora Firmware (1a0025e9-05fb-5d5c-8759-1e47d16655e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45228 vulnerable 2026-06-08 05:50:35.959116 Details available
Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page.
Published: 2022-12-12T00:00:00.000Z
Updated: 2025-04-23T13:43:59.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45227 vulnerable 2026-06-08 05:50:35.957722 Details available
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication.
Published: 2022-12-12T00:00:00.000Z
Updated: 2025-04-23T13:45:11.292Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.