CVE-2022-40204: Digitalalertsystems Dasdec I Firmware

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

Affected products

• Digitalalertsystems Dasdec I Firmware: affected versions not specified
• Digitalalertsystems Dasdec Ii Firmware: affected versions not specified
• Digitalalertsystems Dasdec Iii Firmware: affected versions not specified
• Digitalalertsystems One-Net Firmware: affected versions not specified
• Digitalalertsystems One-Net SE Firmware: affected versions not specified

Published 2022-12-01. Last modified 2026-06-17.