Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32929 State: PUBLISHED Published: 2022-04-22T15:00:23.000Z Last Updated: 2025-04-16T16:28:08.137Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Uffizio Products: GPS Tracker Problem Types: CWE-352 Description: All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-02
CVE ID: CVE-2021-32930 State: PUBLISHED Published: 2021-06-11T16:25:36 Last Updated: 2024-08-03T23:33:56.115Z Vendors: n/a Products: iView Problem Types: CWE-306 Description: The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-154-01
CVE ID: CVE-2021-32931 State: PUBLISHED Published: 2021-08-11T12:44:46 Last Updated: 2024-08-03T23:33:55.954Z Vendors: n/a Products: FATEK Automation FvDesigner Problem Types: CWE-824 Description: An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-1030/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1027/
CVE ID: CVE-2021-32932 State: PUBLISHED Published: 2021-06-11T16:24:18 Last Updated: 2024-08-03T23:33:55.942Z Vendors: n/a Products: iView Problem Types: CWE-89 Description: The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versions prior to v5.7.03.6182). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-154-01
CVE ID: CVE-2021-32933 State: PUBLISHED Published: 2022-04-01T22:17:06.000Z Last Updated: 2025-04-16T16:34:34.295Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-77 Description: An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisor
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32934 State: PUBLISHED Published: 2022-05-19T17:20:06.000Z Last Updated: 2025-04-16T16:19:34.297Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ThroughTek Products: P2P SDK Problem Types: CWE-319 Description: The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.
e local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-01
CVE ID: CVE-2021-32935 State: PUBLISHED Published: 2022-05-23T18:42:20.000Z Last Updated: 2025-04-16T17:53:44.261Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Cognex Products: In-Sight OPC Server Problem Types: CWE-502 Description: The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-224-01
CVE ID: CVE-2021-32936 State: PUBLISHED Published: 2021-06-17T00:00:00 Last Updated: 2024-08-03T23:33:56.172Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-787 Description: An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens
VE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-982/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2021-32937 State: PUBLISHED Published: 2022-04-01T22:17:07.000Z Last Updated: 2025-04-16T16:34:22.011Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-209 Description: An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
d and write activity can be initiated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32938 State: PUBLISHED Published: 2021-06-17T00:00:00 Last Updated: 2024-08-03T23:33:55.918Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-125 Description: Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service condition or read sensitive information from memory. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa
ferences: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-980/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2021-32939 State: PUBLISHED Published: 2021-08-11T12:44:58 Last Updated: 2024-08-03T23:33:55.958Z Vendors: n/a Products: FATEK Automation FvDesigner Problem Types: CWE-787 Description: FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-1028/
CVE ID: CVE-2021-32940 State: PUBLISHED Published: 2021-06-17T00:00:00 Last Updated: 2024-08-03T23:33:56.100Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-125 Description: An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or read sensitive information from memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com
rogram Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-986/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-32941 State: PUBLISHED Published: 2022-05-23T18:51:57.000Z Last Updated: 2025-04-16T16:19:18.611Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Annke Products: N48PBB (NVR) Problem Types: CWE-121 Description: Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02
CVE ID: CVE-2021-32942 State: PUBLISHED Published: 2021-06-09T16:06:26.984385Z Last Updated: 2024-09-17T03:17:35.496Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: AVEVA Products: InTouch Problem Types: CWE-316 Description: The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03 - https://www.aveva.com/en/support/cyber-security-updates/
CVE ID: CVE-2021-32943 State: PUBLISHED Published: 2021-08-10T14:03:48 Last Updated: 2024-08-03T23:33:55.931Z Vendors: n/a Products: WebAccess/SCADA Problem Types: CWE-121 Description: The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE ID: CVE-2021-32944 State: PUBLISHED Published: 2021-06-17T12:50:37 Last Updated: 2024-08-03T23:33:55.939Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-416 Description: A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service condition or execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/
ogram Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-987/ - https://www.zerodayinitiative.com/advisories/ZDI-21-990/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-32945 State: PUBLISHED Published: 2022-04-01T22:17:10.000Z Last Updated: 2025-04-16T16:33:53.886Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-326 Description: An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32946 State: PUBLISHED Published: 2021-06-17T11:56:39 Last Updated: 2024-08-03T23:33:55.940Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-754 Description: An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-p
st Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-983/ - https://www.zerodayinitiative.com/advisories/ZDI-21-985/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-32947 State: PUBLISHED Published: 2021-08-11T12:44:53 Last Updated: 2024-08-03T23:33:56.244Z Vendors: n/a Products: FATEK Automation FvDesigner Problem Types: CWE-121 Description: FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-1029/
CVE ID: CVE-2021-32948 State: PUBLISHED Published: 2021-06-17T00:00:00 Last Updated: 2024-08-03T23:33:56.055Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-787 Description: An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.co
Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-984/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2021-32949 State: PUBLISHED Published: 2022-04-01T22:17:09.000Z Last Updated: 2025-04-16T16:34:03.231Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-23 Description: An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32950 State: PUBLISHED Published: 2021-06-17T12:41:51 Last Updated: 2024-08-03T23:33:56.120Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-125 Description: An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service condition or read sensitive information from memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/pro
am Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-988/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-32951 State: PUBLISHED Published: 2021-10-27T00:54:22.837305Z Last Updated: 2024-09-16T20:48:04.366Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Advantech Products: WebAccess/NMS Problem Types: CWE-287 Description: WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02
CVE ID: CVE-2021-32952 State: PUBLISHED Published: 2021-06-17T12:05:05 Last Updated: 2024-08-03T23:33:56.218Z Vendors: n/a Products: Drawings SDK Problem Types: CWE-787 Description: An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/pr
ram Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-989/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-32953 State: PUBLISHED Published: 2022-04-01T22:17:05.000Z Last Updated: 2025-04-16T16:34:44.784Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-89 Description: An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32954 State: PUBLISHED Published: 2021-06-18T13:53:01 Last Updated: 2024-08-03T23:33:55.935Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-23 Description: Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-168-03
CVE ID: CVE-2021-32955 State: PUBLISHED Published: 2021-08-30T17:11:16 Last Updated: 2024-08-03T23:33:56.069Z Vendors: n/a Products: Delta Electronics DIAEnergie Problem Types: CWE-434 Description: Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE ID: CVE-2021-32956 State: PUBLISHED Published: 2021-06-18T13:52:51 Last Updated: 2024-08-03T23:33:55.949Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-601 Description: Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-168-03
CVE ID: CVE-2021-32957 State: PUBLISHED Published: 2022-04-01T22:17:08.000Z Last Updated: 2025-04-16T16:34:14.242Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-89 Description: A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is therefore vulnerable to binary hijacking. Additional Analyst Notes: - CVE Program Container:
h to the executable and is therefore vulnerable to binary hijacking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32958 State: PUBLISHED Published: 2022-05-23T19:34:55.000Z Last Updated: 2025-04-16T16:19:02.719Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Claroty Products: Secure Remote Access (SRA) Site Problem Types: CWE-288 Description: Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.
ccess to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-06
CVE ID: CVE-2021-32959 State: PUBLISHED Published: 2021-09-23T13:32:45 Last Updated: 2024-08-03T23:33:55.987Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AVEVA Software, LLC Products: AVEVA System Platform 2020, AVEVA InTouch 2020, AVEVA Historian 2020 , AVEVA Communication Drivers Pack 2020 , AVEVA Batch Management 2020, AVEVA MES 2014 Problem Types: CWE-122 Description: Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06 Additional Analyst Notes: - CVE Program Container: References: - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf
CVE ID: CVE-2021-32960 State: PUBLISHED Published: 2022-04-01T22:17:11.000Z Last Updated: 2025-04-17T15:51:28.307Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: FactoryTalk Services Platform Problem Types: CVE-693 Protection Mechanism Failure Description: Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client
successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-01 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785