Cisco Duo Network Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Duo Network Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-7340 — CVSS 7.5 (high): Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that…
• CVE-2020-3483 — CVSS 7.1 (high): Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and…