Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update
CVE ID: CVE-2022-36336 State: PUBLISHED Published: 2022-07-29T23:15:34 Last Updated: 2024-08-03T10:00:04.319Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Link Following LPE Description: A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations. The resolution for this issue has been deployed automatically via ActiveUpdate to customers in an updated Spyware pattern. Customers who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue. Additi
rs who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000291267 - https://www.zerodayinitiative.com/advisories/ZDI-22-1033/
CVE ID: CVE-2022-36337 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:37:45.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022039
CVE ID: CVE-2022-36338 State: PUBLISHED Published: 2022-09-23T17:17:49.000Z Last Updated: 2025-05-05T16:13:56.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating SMM, leads to arbitrary code execution. An attacker can replace the pointer to the UEFI boot service GetVariable with a pointer to malware, and then generate a software SMI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://binarly.io/advisories/BRLY-2022-017/index.html - https://www.insy
es: - https://www.insyde.com/security-pledge - https://binarly.io/advisories/BRLY-2022-017/index.html - https://www.insyde.com/security-pledge/SA-2022029
CVE ID: CVE-2022-36339 State: PUBLISHED Published: 2023-05-10T13:16:44.954Z Last Updated: 2025-01-27T18:09:52.385Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/con
ess. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-36340 State: PUBLISHED Published: 2022-09-23T18:31:50.762Z Last Updated: 2025-02-20T20:01:04.920Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: MailOptin Popup Builder Team Products: MailOptin (WordPress plugin) Problem Types: CWE-862 Description: Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-49-0-unauthenticated-optin-campaign-cache-deletion-vulnerability/_s_id=cve - https://plugins.svn.wordpress.org/mailo
1-2-49-0-unauthenticated-optin-campaign-cache-deletion-vulnerability/_s_id=cve - https://plugins.svn.wordpress.org/mailoptin/trunk/changelog.txt
CVE ID: CVE-2022-36341 State: PUBLISHED Published: 2022-08-23T15:47:18.286Z Last Updated: 2025-02-20T20:11:17.652Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Akash soni Products: AS – Create Pinterest Pinboard Pages (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (subscriber+) plugin settings change leading to Stored Cross-Site Scripting (XSS) vulnerability in Akash soni's AS – Create Pinterest Pinboard Pages plugin <= 1.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/as-create-pinterest-pinboard-pages/wordpress-as-create-pinterest
rences: - https://patchstack.com/database/vulnerability/as-create-pinterest-pinboard-pages/wordpress-as-create-pinterest-pinboard-pages-plugin-1-0-authenticated-plugin-settings-change-leading-to-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/as-create-pinterest-pinboard-pages/
CVE ID: CVE-2022-36342 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:29.307Z Description: No description available.
CVE ID: CVE-2022-36343 State: PUBLISHED Published: 2022-08-01T13:55:00.671Z Last Updated: 2025-02-20T20:14:26.986Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: ideasToCode Products: Enable SVG, WebP & ICO Upload (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-stored-
atabase/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/enable-svg-webp-ico-upload/#developers
CVE ID: CVE-2022-36344 State: PUBLISHED Published: 2022-08-16T07:03:05 Last Updated: 2024-08-03T10:00:04.308Z Vendors: JustSystems Corporation Products: JustSystems JUST Online Update for J-License' Problem Types: Unquoted Search Path or Element Description: An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Of
e Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect. Additional Analyst Notes: - CVE Program Container: References: - https://www.justsystems.com/jp/corporate/info/js22001.html - https://jvn.jp/en/jp/JVN57073973/index.html
CVE ID: CVE-2022-36345 State: PUBLISHED Published: 2023-05-28T19:05:18.155Z Last Updated: 2024-11-01T13:00:45.335Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Metagauss Products: Download Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Plugin <= 2.0.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-plugin/wordpress-download-plugin-2-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-36346 State: PUBLISHED Published: 2022-08-22T14:50:25.090Z Last Updated: 2025-02-20T20:12:40.757Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Max Foundry Products: MaxButtons (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/maxbuttons/wordpress-maxbuttons-plugins-9-2-multiple-cross-site-request-forgery-csrf-vulnerabilities - https://wordpress.org/plugins/maxbuttons/#developers
CVE ID: CVE-2022-36347 State: PUBLISHED Published: 2022-08-23T15:48:28.277Z Last Updated: 2025-02-20T20:10:31.827Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Alpine Press Products: Alpine PhotoTile for Pinterest (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alpine Press Alpine PhotoTile for Pinterest plugin <= 1.3.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/alpine-photo-tile-for-pinterest/wordpress-alpine-phototile-for-pinterest-plugin-1-3-1-authenticated-stored-cros
rability/alpine-photo-tile-for-pinterest/wordpress-alpine-phototile-for-pinterest-plugin-1-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/alpine-photo-tile-for-pinterest/
CVE ID: CVE-2022-36348 State: PUBLISHED Published: 2023-02-16T19:59:59.676Z Last Updated: 2025-01-27T18:21:12.669Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel (R) SPS firmware Problem Types: escalation of privilege Description: Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html
CVE ID: CVE-2022-36349 State: PUBLISHED Published: 2022-11-11T15:48:55.398Z Last Updated: 2024-08-03T10:00:04.279Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) NUC Boards and Intel(R) NUC Kits Problem Types: denial of service Description: Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-36350 State: PUBLISHED Published: 2022-08-23T06:31:19.000Z Last Updated: 2025-06-30T20:19:51.648Z Vendors: PukiWiki Development Team Products: PukiWiki Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pukiwiki.osdn.jp/?PukiWiki/Errata - https://jvn.jp/en/jp/JVN43979089/index.html
CVE ID: CVE-2022-36351 State: PUBLISHED Published: 2023-08-11T02:36:54.506Z Last Updated: 2025-02-13T16:32:47.655Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software Problem Types: denial of service, CWE-20 Description: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://list
chment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
CVE ID: CVE-2022-36352 State: PUBLISHED Published: 2024-01-08T21:50:11.156Z Last Updated: 2024-09-04T15:34:07.178Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Profilegrid Products: ProfileGrid – User Profiles, Memberships, Groups and Communities Problem Types: CWE-862 Description: Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/profilegrid-user-pr
gram Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-0-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-36353 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:30.744Z Description: No description available.
CVE ID: CVE-2022-36354 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-14T18:08:48.912Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-193 Description: A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Pro
mation leak. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1629
CVE ID: CVE-2022-36355 State: PUBLISHED Published: 2022-09-01T16:49:39.109Z Last Updated: 2025-02-20T20:10:00.875Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PluginlySpeaking Products: Easy Org Chart (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-org-chart/wordpress-easy-org-chart-plugin-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.
art/wordpress-easy-org-chart-plugin-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/easy-org-chart/
CVE ID: CVE-2022-36356 State: PUBLISHED Published: 2022-09-09T14:39:53.274Z Last Updated: 2025-02-20T20:07:51.648Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Liam Gladdy / Thirty8 Digital Products: Culture Object (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin <= 4.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/culture-object/wordpress-culture-object-plugin-4-0-1-authenticated-stored-cross-site-scripting-xss-vulnerabil
nerability/culture-object/wordpress-culture-object-plugin-4-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/culture-object/#developers
CVE ID: CVE-2022-36357 State: PUBLISHED Published: 2022-11-17T22:06:18.043Z Last Updated: 2025-02-20T19:53:55.231Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Webpsilon Products: ULTIMATE TABLES Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webpsilon ULTIMATE TABLES plugin <= 1.6.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate-tables/wordpress-ultimate-tables-plugin-1-6-5-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-36358 State: PUBLISHED Published: 2022-08-25T17:25:20.753Z Last Updated: 2025-02-20T20:10:09.806Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SEO Scout Products: SEO Scout Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick users with administrative rights to unintentionally change the plugin settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ab-rankings-testing-tool/wordpress-seo-scout-plugin-0-9-83-cross-site-request-forgery-csrf-vulnerability
e/vulnerability/ab-rankings-testing-tool/wordpress-seo-scout-plugin-0-9-83-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/ab-rankings-testing-tool/
CVE ID: CVE-2022-36359 State: PUBLISHED Published: 2022-08-03T00:00:00.000Z Last Updated: 2025-02-13T16:32:48.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/4.0/releases/security/ - http://www.openwall.com/lists/oss-security/2022/08/03/1 - https://groups.google.com/g/django-announce/c/8cz--gva
rity/ - http://www.openwall.com/lists/oss-security/2022/08/03/1 - https://groups.google.com/g/django-announce/c/8cz--gvaJr4 - https://www.djangoproject.com/weblog/2022/aug/03/security-releases/ - https://security.netapp.com/advisory/ntap-20220915-0008/ - https://www.debian.org/security/2022/dsa-5254 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/
CVE ID: CVE-2022-36360 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T10:00:04.365Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-345 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-928782.pdf
CVE ID: CVE-2022-36361 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-11-20T14:54:31.767Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C) Vendors: Siemens Products: LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo Problem Types: CWE-120 Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RC
in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLU
, SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-955858.pdf - https://cert-portal.siemens.com/productcert/html/ssa
- https://cert-portal.siemens.com/productcert/pdf/ssa-955858.pdf - https://cert-portal.siemens.com/productcert/html/ssa-955858.html
CVE ID: CVE-2022-36362 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-10-08T08:39:54.573Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:T/RC:C) Vendors: Siemens Products: LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo Problem Types: CWE-20 Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (
OGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions