Filtered by vendor Tripplite Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-26801 1 Tripplite 2 Su2200rtxl2ua, Su2200rtxl2ua Firmware 2024-02-14 5.4 Medium
A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.
CVE-2019-16261 1 Tripplite 2 Pdumh15at, Pdumh15at Firmware 2019-09-13 9.1 Critical
Tripp Lite PDUMH15AT 12.04.0053 devices allow unauthenticated POST requests to the /Forms/ directory, as demonstrated by changing the manager or admin password, or shutting off power to an outlet. NOTE: the vendor's position is that a newer firmware version, fixing this vulnerability, had already been released before this vulnerability report about 12.04.0053.