What is the cisa-cg CNA?
cisa-cg is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 123 CVE records since 2023.
How many CVEs has cisa-cg published?
cisa-cg has published 123 CVE records, including 110 in the last two years.
What is cisa-cg's CVE data quality grade?
RadicalNotion.AI grades cisa-cg's CVE data quality as A, with an overall completeness score of 98.6%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (96.7%), and CWE (97.6%) information.
What products does cisa-cg publish CVEs for?
cisa-cg most frequently publishes CVEs for Project Center, deebot t10 firmware, DEEBOT T10, OpenBSD, Thorium.
Which vendors does cisa-cg cover?
cisa-cg publishes CVEs across 53 distinct vendors, most often OPEXUS, opexustech, Newforma, ECOVACS, CISA.
Is cisa-cg actively publishing CVEs?
cisa-cg is currently active, based on 110 CVEs in the last two years.
What is the average severity of cisa-cg's CVEs?
The average CVSS base score across cisa-cg's scored CVEs is 6.7.
How many critical CVEs has cisa-cg published?
cisa-cg has published 31 critical-severity CVEs and 43 high-severity CVEs.
Are any of cisa-cg's CVEs in CISA's Known Exploited Vulnerabilities catalog?
Yes. 7 of cisa-cg's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in cisa-cg's CVEs?
cisa-cg's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-306 (Missing Authentication for Critical Function), CWE-287 (Improper Authentication).
How does cisa-cg rank among CNAs?
By total CVE volume, cisa-cg ranks #113 of 370 CNAs, and it reports more complete CVE records than 51% of all CNAs.
