Ddrt's vulnerability profile centers on its Dashcom Live products, a narrowly scoped line of communications and firmware components. The durable signal reflects authentication-design issues, specifically missing authentication controls on critical functions that could expose operational capabilities. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ddrt over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-11020HIGH Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/ | Jul 9, 2019 | 7.5 | 24 | NO | NO |
CVE-2019-11019HIGH Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpd | Jul 9, 2019 | 7.5 | 24 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ddrt.
Media articles that mention a CVE ID that affects a product developed by Ddrt — matched by CVE ID, not by vendor name.