Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43741 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-27T20:14:11.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md
CVE ID: CVE-2023-43742 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T19:52:10.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function. In normal operation, the Zultys MX Administrator Windows client connects to port 7505 and attempts authentication, submitting the administrator username and password to the server. Upon authentication failure, the server sends a logi
, submitting the administrator username and password to the server. Upon authentication failure, the server sends a login failure message prompting the client to disconnect. However, if the client ignores the failure message instead and attempts to continue, the server does not forcibly close the connection and processes all subsequent requests from the client as if authentication had been successful. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE ID: CVE-2023-43743 State: PUBLISHED Published: 2023-12-08T00:00:00.000Z Last Updated: 2025-05-27T15:34:49.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary SQL queries on the backend database via the filter parameter in requests to the /newapi/ endpoint in the Zultys MX web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mxvirtual.com - https://github.com/atredispartners/advisories/blob/master/ATRED
ADP Vulnrichment: References: - https://mxvirtual.com - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE ID: CVE-2023-43744 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T19:52:10.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zultys MX Administrator client has a "Patch Manager" section that allows administrators to apply patches to the device. The user supplied filename for the patch file is passed to a shell script without validation. Including bash command s
. The user supplied filename for the patch file is passed to a shell script without validation. Including bash command substitution characters in a patch file name results in execution of the provided command. Additional Analyst Notes: - CVE Program Container: References: - https://mxvirtual.com - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE ID: CVE-2023-43745 State: PUBLISHED Published: 2024-05-16T20:47:34.772Z Last Updated: 2024-08-02T19:52:10.930Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) CBI software Problem Types: denial of service, CWE-20 Description: Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01013.html
CVE ID: CVE-2023-43746 State: PUBLISHED Published: 2023-10-10T12:36:52.839Z Last Updated: 2024-09-18T18:38:18.822Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-267 Description: When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ort (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K41072952
CVE ID: CVE-2023-43747 State: PUBLISHED Published: 2024-08-14T13:45:27.586Z Last Updated: 2024-08-14T14:00:46.359Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Connectivity Performance Suite software installers Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01102.html
CVE ID: CVE-2023-43748 State: PUBLISHED Published: 2024-05-16T20:47:44.843Z Last Updated: 2024-08-02T19:52:10.909Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) GPA Framework software installers Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE ID: CVE-2023-43749 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:13:30.078Z Description: No description available.
CVE ID: CVE-2023-43751 State: PUBLISHED Published: 2024-05-16T20:47:39.645Z Last Updated: 2024-08-02T19:52:10.893Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Windows DCH driver software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com
access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00937.html
CVE ID: CVE-2023-43752 State: PUBLISHED Published: 2023-11-16T06:46:38.102Z Last Updated: 2024-08-02T19:52:11.086Z Vendors: ELECOM CO.,LTD. Products: WRC-X3000GS2-W, WRC-X3000GS2-B, WRC-X3000GS2A-B Problem Types: OS command injection Description: OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20231114-01/ - https://jvn.jp/en/vu/JVNVU94119876/
CVE ID: CVE-2023-43753 State: PUBLISHED Published: 2024-09-16T16:38:46.373Z Last Updated: 2025-11-03T21:49:42.630Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Processors with Intel(R) SGX Problem Types: information disclosure, CWE-92 Description: Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2023-43754 State: PUBLISHED Published: 2023-11-27T09:11:13.283Z Last Updated: 2024-08-02T19:52:11.105Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-43755 State: PUBLISHED Published: 2023-11-08T22:57:59.332Z Last Updated: 2025-01-16T21:26:14.927Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zavio Products: IP Camera CF7500, IP Camera CF7300, IP Camera CF7201, IP Camera CF7501, IP Camera CB3211, IP Camera CB3212, IP Camera CB5220, IP Camera CB6231, IP Camera B8520, IP Camera B8220, IP Camera CD321 Problem Types: CWE-121 Description: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in
5 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03
CVE ID: CVE-2023-43756 State: PUBLISHED Published: 2024-02-02T06:18:38.658Z Last Updated: 2024-08-02T19:52:11.030Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2023-43757 State: PUBLISHED Published: 2023-11-16T06:21:13.445Z Last Updated: 2024-08-02T19:52:10.967Z Vendors: ELECOM CO.,LTD. Products: WRC-2533GHBK2-T, WRC-2533GHBK-I, WRC-1750GHBK2-I, WRC-1750GHBK-E, WRC-1750GHBK, WRC-1167GHBK2, WRC-1167GHBK, WRC-F1167ACF, WRC-733GHBK, WRC-733GHBK-I, WRC-733GHBK-C, WRC-300GHBK2-I, WRC-300GHBK, WRC-733FEBK, WRC-300FEBK, WRC-F300NF, WRH-300WH-H, WRH-300BK, WRH-300WH, WRH-300RD, WRH-300SV, WRH-300BK-S, WRH-300WH-S, WRH-300BK2-S, WRH-300WH2-S, WRH-H300BK, WRH-H300WH, WRH-150BK, WRH-150WH, LAN-W300N/RS, LAN-W301NR, LAN-W300N/P, LAN-WH300N/DGP, LAN-WH300NDGPE Problem Types: Inadequate Encryption Strength Description: Inadequate encryption strength
AN-WH300N/DGP, LAN-WH300NDGPE Problem Types: Inadequate Encryption Strength Description: Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20231114-01/ - https://www.elecom.co.jp/news/security/20230810-01/ - https://www.elecom.co.jp/news/security/20210706-01/ - https://j
- https://www.elecom.co.jp/news/security/20230810-01/ - https://www.elecom.co.jp/news/security/20210706-01/ - https://jvn.jp/en/vu/JVNVU94119876/
CVE ID: CVE-2023-43758 State: PUBLISHED Published: 2025-02-12T21:19:24.119Z Last Updated: 2025-11-03T20:36:00.955Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) processors Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
CVE ID: CVE-2023-43760 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-08-02T19:52:10.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.
tlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn6
CVE ID: CVE-2023-43761 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T19:39:07.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5
CVE ID: CVE-2023-43762 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T15:55:58.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511 - https://www.withsecure.com/en/support/security-advisories/cve-2023-43762
CVE ID: CVE-2023-43763 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T15:57:04.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn
CVE ID: CVE-2023-43764 State: REJECTED Published: N/A Last Updated: 2023-10-13T15:40:10.767693 Description: No description available.
CVE ID: CVE-2023-43765 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T16:24:55.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
tlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2
CVE ID: CVE-2023-43766 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T13:17:56.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CIS
2.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn4
CVE ID: CVE-2023-43767 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T13:16:39.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP
nd WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories - https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn3
CVE ID: CVE-2023-43768 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-05T14:33:35.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.couchbase.com/tags/security - https://www.couchbase.com/downloads - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-43769 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-25T21:42:16.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://www.couchbase.com/downloads - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-43770 State: PUBLISHED Published: 2023-09-22T00:00:00.000Z Last Updated: 2025-10-21T23:05:36.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/commit/e92ec206a886461245e1672d8530cc93c618a49b - https://roundcube.net/news/2023/09/15/security-update-1.6.3-released - https://lists.debian.org/debian-lts-announce/2023/09/msg00024.html
CVE ID: CVE-2023-43771 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-25T13:12:43.158Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mikebrady/nqptp/commit/b24789982d5cc067ecf6e8f3352b701d177530ec - https://github.com/mikebrady/nqptp/releases/tag/1.2.3 - https://github.com/mikebrady/nqptp/releases/tag/1.2.4
CVE ID: CVE-2023-43775 State: PUBLISHED Published: 2023-09-26T13:50:13.211Z Last Updated: 2024-09-24T13:19:42.645Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Eaton Products: SMP SG-4260, SMP SG-4250, SMP 4/DP, SMP 16 Problem Types: CWE-400 Description: Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore. Additional Analyst Notes: - CVE Program Co
Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2022-1008.pdf
CVE ID: CVE-2023-43776 State: PUBLISHED Published: 2023-10-17T12:35:09.849Z Last Updated: 2024-09-13T16:27:22.502Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Eaton Products: easyE4 Problem Types: CWE-261 Description: Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cy
ogram Container: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1010.pdf