Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-41495 State: PUBLISHED Published: 2021-12-17T19:25:19 Last Updated: 2024-08-04T03:15:28.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly
, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place Additional Analyst Notes: - CVE Program Container: References: - https://github.com/numpy/numpy/issues/19038 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-41496 State: PUBLISHED Published: 2021-12-17T19:56:35 Last Updated: 2024-08-04T03:15:28.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/numpy/numpy/issues/19000 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-41497 State: PUBLISHED Published: 2021-12-17T20:08:52 Last Updated: 2024-08-04T03:15:28.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RaRe-Technologies/bounter/issues/47
CVE ID: CVE-2021-41498 State: PUBLISHED Published: 2021-12-17T20:16:06 Last Updated: 2024-08-04T03:15:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Server_jack_init function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belangeo/pyo/issues/221
CVE ID: CVE-2021-41499 State: PUBLISHED Published: 2021-12-17T20:36:19 Last Updated: 2024-08-04T03:15:28.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belangeo/pyo/issues/222
CVE ID: CVE-2021-41500 State: PUBLISHED Published: 2021-12-17T20:44:24 Last Updated: 2024-08-04T03:15:28.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cvxopt/cvxopt/issues/193 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXTPM3DGVYTYQ54OFCMXZVWVOMR7JM2D/
CVE ID: CVE-2021-41502 State: PUBLISHED Published: 2022-06-11T13:55:45 Last Updated: 2024-08-04T03:15:28.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/885
CVE ID: CVE-2021-41503 State: PUBLISHED Published: 2021-09-24T19:26:55 Last Updated: 2024-08-04T03:15:28.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportann
DP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247
CVE ID: CVE-2021-41504 State: PUBLISHED Published: 2021-09-24T19:30:35 Last Updated: 2024-08-04T03:15:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannounceme
st Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247
CVE ID: CVE-2021-41506 State: PUBLISHED Published: 2022-06-30T12:43:54 Last Updated: 2024-08-04T03:15:28.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system. Additional Analyst Notes: - CVE P
es of DVR/NVR/IP camera firmware due to static root account credentials in the system. Additional Analyst Notes: - CVE Program Container: References: - https://habr.com/en/post/486856/ - https://www.xiongmaitech.com/en/index.php/news/info/12/68 - https://github.com/Snawoot/hisilicon-dvr-telnet - https://github.com/tothi/hs-dvr-telnet
CVE ID: CVE-2021-41511 State: PUBLISHED Published: 2021-10-04T12:17:55 Last Updated: 2024-08-04T03:15:28.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html - https://github.com/Ni7inSharma/CVE-2021-41511 - https://www.exploit-db.com/exploits/50372 - http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html
ploits/50372 - http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511 - https://streamable.com/9fq8uw - https://www.nu11secur1ty.com/2021/10/cve-2021-41511.html
CVE ID: CVE-2021-41524 State: PUBLISHED Published: 2021-10-05T08:40:11 Last Updated: 2024-08-04T03:15:28.450Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-476 Description: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2021/10/05/1 - https://l
/httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2021/10/05/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSM6UWQICBJ2TU727RENU3HBKEAFLT6T/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUVJVRJRBW5QVX4OY3NOHZDQ3B3YOTSG/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211029-0009/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2021-41525 State: PUBLISHED Published: 2021-09-21T14:35:10 Last Updated: 2024-08-04T03:15:28.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/FlexNet-Inventory-Agent-and-Inventory-Beacon-Vulnerability/ta-p/204723
CVE ID: CVE-2021-41526 State: PUBLISHED Published: 2023-03-29T00:00:00 Last Updated: 2024-08-04T03:15:28.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2021-41526-Privilege-escalation-vulnerability-during-MSI/ta-p/218137/jump-to/first-unread-message - https://github.com/mandiant/Vulnerability-Dis
lation-vulnerability-during-MSI/ta-p/218137/jump-to/first-unread-message - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0011/MNDT-2021-0011.md - http://seclists.org/fulldisclosure/2024/Apr/24
CVE ID: CVE-2021-41527 State: PUBLISHED Published: 2025-02-07T19:44:43.401Z Last Updated: 2025-03-13T13:36:22.969Z Vendors: Flexera Products: RISC Platform Problem Types: Missing Critical Step in Authentication Description: An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA setup hasn’t been completed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.flexera.com/s/feed/0D5PL00000Nwgg30AB - https://medium.com/@amroot/cve-2021-41527-flexera-multi-factor-authentication-mfa-bypass-cb9effc3af98
CVE ID: CVE-2021-41528 State: PUBLISHED Published: 2025-02-07T19:54:05.632Z Last Updated: 2025-02-07T21:18:57.352Z Vendors: Flexera Products: RISC Platform Problem Types: CWE-863 Description: An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to access the import / export functionality with low privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.flexera.com/s/feed/0D5PL00000Nwgg30AB - https://medium.com/@amroot/cve-2021-41528-flexera-risc-networks-vulnerable-authorization-schema-3e980d59217a
CVE ID: CVE-2021-41530 State: PUBLISHED Published: 2021-10-04T16:58:41 Last Updated: 2024-08-04T03:15:28.647Z Vendors: n/a Products: Forcepoint Next Generation Firewall Problem Types: Reflected Amplification Denial of Service Description: Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2021-41530.html
CVE ID: CVE-2021-41531 State: PUBLISHED Published: 2021-09-21T13:23:17.982390Z Last Updated: 2024-09-16T20:27:40.850Z Vendors: NLnet Labs Products: Routinator Problem Types: CWE-1288 Description: NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-41531.txt
CVE ID: CVE-2021-41532 State: PUBLISHED Published: 2021-11-19T09:20:26 Last Updated: 2024-08-04T03:15:29.160Z Vendors: Apache Software Foundation Products: Apache Ozone Problem Types: CWE-200 Description: In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3Ce0bc6598-9669-b897-fc28-de8a896e36aa%40apache.org%3E - http://www.openwall.com/lists/oss-security/2021/11/19/8
CVE ID: CVE-2021-41533 State: PUBLISHED Published: 2021-09-28T11:12:27 Last Updated: 2024-08-04T03:15:27.969Z Vendors: Siemens Products: NX 1980 Series, Solid Edge SE2021 Problem Types: CWE-125 Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13565). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.p
ional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1117/ - https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf
CVE ID: CVE-2021-41534 State: PUBLISHED Published: 2021-09-28T11:12:28 Last Updated: 2024-08-04T03:15:28.536Z Vendors: Siemens Products: NX 1980 Series, Solid Edge SE2021 Problem Types: CWE-125 Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13703). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.p
ional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1118/
CVE ID: CVE-2021-41535 State: PUBLISHED Published: 2021-09-28T11:12:29 Last Updated: 2024-08-04T03:15:28.435Z Vendors: Siemens Products: NX 1953 Series, NX 1980 Series, Solid Edge SE2021 Problem Types: CWE-416 Description: A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13771). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/produ
(ZDI-CAN-13771). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1119/ - https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf
CVE ID: CVE-2021-41536 State: PUBLISHED Published: 2021-09-28T11:12:30 Last Updated: 2024-08-04T03:15:28.992Z Vendors: Siemens Products: Solid Edge SE2021 Problem Types: CWE-416 Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13778). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1120/
CVE ID: CVE-2021-41537 State: PUBLISHED Published: 2021-09-28T11:12:31 Last Updated: 2024-08-04T03:15:28.458Z Vendors: Siemens Products: Solid Edge SE2021 Problem Types: CWE-416 Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13789). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1121/
CVE ID: CVE-2021-41538 State: PUBLISHED Published: 2021-09-28T11:12:32 Last Updated: 2024-08-04T03:15:29.147Z Vendors: Siemens Products: NX 1953 Series, NX 1980 Series, Solid Edge SE2021 Problem Types: CWE-824 Description: A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied OBJ files. An attacker could leverage this vulnerability to leak information from unexpected memory locations (ZDI-CAN-13770). Additional Analyst Notes: - CVE Program
erability to leak information from unexpected memory locations (ZDI-CAN-13770). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1122/
CVE ID: CVE-2021-41539 State: PUBLISHED Published: 2021-09-28T11:12:33 Last Updated: 2024-08-04T03:15:29.176Z Vendors: Siemens Products: Solid Edge SE2021 Problem Types: CWE-416 Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13773). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1123/
CVE ID: CVE-2021-41540 State: PUBLISHED Published: 2021-09-28T11:12:33 Last Updated: 2024-08-04T03:15:29.189Z Vendors: Siemens Products: Solid Edge SE2021 Problem Types: CWE-416 Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13776). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1124/
CVE ID: CVE-2021-41541 State: PUBLISHED Published: 2022-03-08T11:31:09 Last Updated: 2024-08-04T03:15:28.434Z Vendors: Siemens Products: Climatix POL909 (AWB module), Climatix POL909 (AWM module) Problem Types: CWE-79 Description: A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The Group Management page of affected devices is vulnerable to cross-site scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. Addit
ser's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
CVE ID: CVE-2021-41542 State: PUBLISHED Published: 2022-03-08T11:31:11 Last Updated: 2024-08-04T03:15:28.699Z Vendors: Siemens Products: Climatix POL909 (AWB module), Climatix POL909 (AWM module) Problem Types: CWE-79 Description: A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The User Management page of affected devices is vulnerable to cross-site scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. Additi
er's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
CVE ID: CVE-2021-41543 State: PUBLISHED Published: 2022-03-08T11:31:12 Last Updated: 2024-08-04T03:15:28.650Z Vendors: Siemens Products: Climatix POL909 (AWB module), Climatix POL909 (AWM module) Problem Types: CWE-284 Description: A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
CVE ID: CVE-2021-41544 State: PUBLISHED Published: 2023-08-08T09:20:08.677Z Last Updated: 2024-10-11T22:18:43.088Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Siemens Software Center Problem Types: CWE-427 Description: A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-188491.p
E Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-188491.pdf