icp das vulnerabilities

Products

• ET-7060 1
• ua-2200 1
• ua-5200 1

Latest icp das CVEs

Newest publication first

1. CVE-2026-84059 ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection

   Published 2026-09-01

   Medium·CVSS 5.3 EPSS 2.0%

   A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be execu...

2. CVE-2023-4817 Unrestricted file upload vulnerability in ICP DAS ET-7060

   Published 2023-10-03

   High·CVSS 8.8 EPSS 0.75%

   This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.