Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6889 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6890 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6891 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6892 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6893 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6894 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6895 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6896 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6897 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6898 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6899 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6900 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6901 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6902 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6903 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6904 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6905 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6906 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6907 State: REJECTED Published: 2021-01-05T17:21:20 Last Updated: 2021-01-05T17:21:20 Description: No description available.
CVE ID: CVE-2020-6908 State: REJECTED Published: 2021-01-05T17:21:21 Last Updated: 2021-01-05T17:21:21 Description: No description available.
CVE ID: CVE-2020-6909 State: REJECTED Published: 2021-01-05T17:21:21 Last Updated: 2021-01-05T17:21:21 Description: No description available.
CVE ID: CVE-2020-6910 State: REJECTED Published: 2021-01-05T17:21:21 Last Updated: 2021-01-05T17:21:21 Description: No description available.
CVE ID: CVE-2020-6911 State: REJECTED Published: 2021-01-05T17:21:21 Last Updated: 2021-01-05T17:21:21 Description: No description available.
CVE ID: CVE-2020-6917 State: PUBLISHED Published: 2022-02-16T16:38:00 Last Updated: 2024-08-04T09:18:01.628Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6918 State: PUBLISHED Published: 2022-02-16T16:37:58 Last Updated: 2024-08-04T09:18:01.684Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6919 State: PUBLISHED Published: 2022-02-16T16:37:59 Last Updated: 2024-08-04T09:18:01.465Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6920 State: PUBLISHED Published: 2022-02-16T16:38:09 Last Updated: 2024-08-04T09:18:01.475Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6921 State: PUBLISHED Published: 2022-02-16T16:38:09 Last Updated: 2024-08-04T09:18:01.635Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6922 State: PUBLISHED Published: 2022-02-16T16:38:01 Last Updated: 2024-08-04T09:18:02.532Z Vendors: n/a Products: HP Support Assistant Problem Types: Compromise of Integrity, Allowed Communication with Untrusted Clients Description: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5585999-5586023-16 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md
CVE ID: CVE-2020-6923 State: PUBLISHED Published: 2024-12-19T18:16:32.364Z Last Updated: 2024-12-20T17:38:57.940Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: HP Products: HP Linux Imaging and Printing Software Problem Types: CWE-120 Description: The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/c06927115
CVE ID: CVE-2020-6931 State: PUBLISHED Published: 2021-11-03T19:07:43 Last Updated: 2024-08-04T09:18:01.599Z Vendors: n/a Products: HP Print and Scan Doctor Problem Types: Local Elevation of Privilege Description: HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/c06982375
CVE ID: CVE-2020-6932 State: PUBLISHED Published: 2020-08-12T12:21:32 Last Updated: 2025-08-22T15:16:18.943Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: BlackBerry Products: QNX Software Development Platform (SDP) Problem Types: CWE-150 Description: An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?article
Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000061411
CVE ID: CVE-2020-6933 State: PUBLISHED Published: 2020-10-14T13:31:17 Last Updated: 2024-08-04T09:18:02.593Z Vendors: n/a Products: BlackBerry UEM Problem Types: Improper input validation Description: An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service. Additional Analyst Notes: - CVE Program Container: References: - https://support.blackberry.com/kb/articleDetail?articleNumber=000068112
CVE ID: CVE-2020-6937 State: PUBLISHED Published: 2020-05-29T21:27:33 Last Updated: 2024-08-04T09:18:02.520Z Vendors: n/a Products: MuleSoft Mule CE/EE Problem Types: Denial of Service Description: A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.com/articleView?id=000353701&language=en_US&type=1&mode=1
CVE ID: CVE-2020-6938 State: PUBLISHED Published: 2020-07-08T15:02:06 Last Updated: 2024-08-04T09:18:02.417Z Vendors: n/a Products: Tableau Problem Types: Sensitive Information Disclosure Description: A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.com/apex/HTViewSolution?urlname=Sensitive-information-disclosure-vulnerability-affecting-Tableau-Server-in-certain-use-cases&language=en_US - https://help.salesforce.com/articleView?id=000354158&type=1&mode=1
CVE ID: CVE-2020-6939 State: PUBLISHED Published: 2020-11-23T16:16:25 Last Updated: 2024-08-04T09:18:01.581Z Vendors: n/a Products: Tableau Server Problem Types: Incorrect Access Control Description: Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 thr
3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.com/articleView?id=000355686&type=1&mode=1
CVE ID: CVE-2020-6948 State: PUBLISHED Published: 2020-01-13T18:58:59 Last Updated: 2024-08-04T09:18:02.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HashBrownCMS/hashbrown-cms/issues/326
CVE ID: CVE-2020-6949 State: PUBLISHED Published: 2020-01-13T18:58:45 Last Updated: 2024-08-04T09:18:02.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HashBrownCMS/hashbrown-cms/issues/327
CVE ID: CVE-2020-6950 State: PUBLISHED Published: 2021-06-02T15:49:48 Last Updated: 2024-08-04T09:18:01.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuoct2021.html - https://github.com/eclipse-ee4j/mojarra/issues/4571 - https://github.com/eclipse-ee4j/mojarra/commit/cefbb9447e7be560e59da2da6bd7cb93776f7741 - https://bugs.eclipse.org/bugs/show_bug.cgi?id=550943 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.c
.eclipse.org/bugs/show_bug.cgi?id=550943 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-6954 State: PUBLISHED Published: 2020-01-13T22:17:50 Last Updated: 2024-08-04T09:18:01.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_folder.cgi?apply_mode=ping_server URI. Additional Analyst Notes: - CVE Program Container: References: - https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html
CVE ID: CVE-2020-6955 State: PUBLISHED Published: 2020-01-13T22:17:36 Last Updated: 2024-08-04T09:18:02.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html
CVE ID: CVE-2020-6956 State: PUBLISHED Published: 2020-05-19T13:07:53 Last Updated: 2024-08-04T09:18:01.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCS DEXICON 3.4.1 allows XSS via the loginName parameter in login_action.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.kpmg.de/noindex/advisories/KPMG-2019-001.txt
CVE ID: CVE-2020-6958 State: PUBLISHED Published: 2020-01-13T23:07:35 Last Updated: 2024-08-04T09:18:01.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially cause denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/yajsw/bugs/166/ - https://github.com/NationalSecurityAgency/ghidra/issues/943 - https://github.com/purpleracc00n/Exploits-and-PoC/blob/master/XXE%20in%20YAJSW%E2%80%99s%20JnlpSupport%20affects%20Ghidra%20Server.md
CVE ID: CVE-2020-6959 State: PUBLISHED Published: 2020-01-22T14:16:57 Last Updated: 2024-08-04T09:18:02.463Z Vendors: n/a Products: Honeywell Maxpro VMS & NVR Problem Types: CWE-502 Description: The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to rem
NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to remotely modify deserialized data without authentication using a specially crafted web request, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-021-01
CVE ID: CVE-2020-6960 State: PUBLISHED Published: 2020-01-22T14:17:07 Last Updated: 2024-08-04T09:18:02.477Z Vendors: n/a Products: Honeywell Maxpro VMS & NVR Problem Types: CWE-89 Description: The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch contain an SQL injection vulnerability that could give an attacker remote unauthenticated acce
VR 5.6 Build 595 T2-Patch contain an SQL injection vulnerability that could give an attacker remote unauthenticated access to the web user interface with administrator-level privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-021-01
CVE ID: CVE-2020-6961 State: PUBLISHED Published: 2020-01-24T16:07:45 Last Updated: 2024-08-04T09:18:02.493Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-256 Description: In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files. Additional
fected products that could allow an attacker to obtain access to the SSH private key in configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6962 State: PUBLISHED Published: 2020-01-24T16:07:54 Last Updated: 2024-08-04T09:18:01.628Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-20 Description: In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X CARESCAPE Central Station (CSCS) Versions 2.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, an input validati
ersions 2.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, an input validation vulnerability exists in the web-based system configuration utility that could allow an attacker to obtain arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6963 State: PUBLISHED Published: 2020-01-24T16:31:37 Last Updated: 2024-08-04T09:18:01.475Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-798 Description: In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References:
may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6964 State: PUBLISHED Published: 2020-01-24T16:32:13 Last Updated: 2024-08-04T09:18:02.496Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-306 Description: In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access with
service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6965 State: PUBLISHED Published: 2020-01-24T17:06:53 Last Updated: 2024-08-04T09:18:02.543Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-434 Description: In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arb
n 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6966 State: PUBLISHED Published: 2020-01-24T17:07:00 Last Updated: 2024-08-04T09:18:02.517Z Vendors: n/a Products: GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors Problem Types: CWE-326 Description: In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an attacker to obtain remote code execution of devices on the network. Additional Anal
desktop control, which may allow an attacker to obtain remote code execution of devices on the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-023-01
CVE ID: CVE-2020-6967 State: PUBLISHED Published: 2020-03-23T20:16:11 Last Updated: 2024-08-04T09:18:02.444Z Vendors: n/a Products: Rockwell Automation All versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform Problem Types: CWE-502 Description: In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-051-02