FAIL › dossier

sercomm vendor

failure events

zero-days

RCEs

on KEV

critical

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 1 events

Date	Event	Sev	Flags	Shame	Summary
2021-02-27	CVE-2021-27132	critical		35	SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.

Sentiment · trusted sources

synthesis severe-fallout -0.80

CISA and security press condemn SerComm's CRLF injection vulnerability as critical and widely exploited, with no evidence of praise or mitigation in provided sources.
cooey ↗ severe-fallout -0.90

Critical vulnerability disclosed

“SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.”
www.cvefind.com ↗ severe-fallout -0.50

Vulnerability listed in CISA KEV

“CISA - Exploited vuln.”
www.databreachtoday.com ↗ severe-fallout +0.00

Irrelevant content
www.iheart.com ↗ severe-fallout +0.00

Irrelevant content
classactionu.org ↗ severe-fallout +0.00

Irrelevant content
www.security.org ↗ severe-fallout +0.00

Irrelevant content
CISA ↗ severe-fallout -0.80

CISA ICS Advisory issued

“ICS Advisories | CISA”