Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9616 State: PUBLISHED Published: 2017-06-14T20:00:00 Last Updated: 2024-08-05T17:11:02.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99085 - http://www.securitytracker.com/id/1038706 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777
CVE ID: CVE-2017-9617 State: PUBLISHED Published: 2017-06-14T20:00:00 Last Updated: 2024-08-05T17:11:02.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13799 - http://www.securitytracker.com/id/1038706 - http://www.securityfocus.com/bid/99087
CVE ID: CVE-2017-9618 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3c2aebbedd37fab054e80f2e315de07d7e9b5bdb - https://bugs.ghostscript.com/show_bug.cgi?id=698044 - http://www.securityfoc
=3c2aebbedd37fab054e80f2e315de07d7e9b5bdb - https://bugs.ghostscript.com/show_bug.cgi?id=698044 - http://www.securityfocus.com/bid/99993
CVE ID: CVE-2017-9619 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentation Violation and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - http://www.securityfocus.com/bid/99988 - https://bugs.ghostscript.com/show_bug.cgi?id=698042 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c53183d4e7103e87368b7cfa15367a47d559e323
CVE ID: CVE-2017-9620 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - http://www.securityfocus.com/bid/99990 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ee5563748
01811-12 - http://www.securityfocus.com/bid/99990 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ee55637480d5e319a5de0481b01c3346855cbc9 - https://bugs.ghostscript.com/show_bug.cgi?id=698050
CVE ID: CVE-2017-9621 State: PUBLISHED Published: 2017-06-14T21:00:00Z Last Updated: 2024-09-16T17:54:41.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) original or (2) new parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/185 - https://github.com/Telaxus/EPESI/commit/3cd666558c89d9c4b27eb74bf6b8e81b4f6e7118
CVE ID: CVE-2017-9622 State: PUBLISHED Published: 2017-06-14T21:00:00Z Last Updated: 2024-09-16T20:26:27.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/186 - https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd
CVE ID: CVE-2017-9623 State: PUBLISHED Published: 2017-06-14T21:00:00Z Last Updated: 2024-09-16T16:43:35.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/186 - https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd
CVE ID: CVE-2017-9624 State: PUBLISHED Published: 2017-06-14T21:00:00Z Last Updated: 2024-09-17T01:41:19.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/186 - https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd
CVE ID: CVE-2017-9625 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T17:11:02.334Z Vendors: n/a Products: Envitech Ltd. EnviDAS Ultimate Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101249 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03
CVE ID: CVE-2017-9626 State: PUBLISHED Published: 2019-03-27T19:35:52 Last Updated: 2024-08-05T17:11:02.498Z Vendors: Marel Products: Marel Food Processing Systems Pluto platform Problem Types: CWE-284 Description: Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B
CVE ID: CVE-2017-9627 State: PUBLISHED Published: 2017-07-07T17:00:00 Last Updated: 2024-08-05T17:11:02.370Z Vendors: n/a Products: Schneider Electric Wonderware ArchestrA Logger Problem Types: CWE-400 Description: An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99488 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04 - http://software.schneide
tp://www.securityfocus.com/bid/99488 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/ - http://www.securitytracker.com/id/1038836
CVE ID: CVE-2017-9628 State: PUBLISHED Published: 2017-10-04T07:00:00 Last Updated: 2024-08-05T17:11:02.411Z Vendors: n/a Products: Saia Burgess Controls PCD Controllers Problem Types: CWE-200 Description: An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-05 - http://www.securityfocus.com/bid/100949
CVE ID: CVE-2017-9629 State: PUBLISHED Published: 2017-07-07T17:00:00 Last Updated: 2024-08-05T17:11:02.286Z Vendors: n/a Products: Schneider Electric Wonderware ArchestrA Logger Problem Types: CWE-121 Description: A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow a remote attacker to execute arbitrary code in the context of a highly privileged account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99488 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04 - http://sof
ferences: - http://www.securityfocus.com/bid/99488 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/ - http://www.securitytracker.com/id/1038836
CVE ID: CVE-2017-9630 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T17:11:02.365Z Vendors: n/a Products: PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct. Additional Analyst N
sions. The web server does not properly verify that provided authentication information is correct. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03
CVE ID: CVE-2017-9631 State: PUBLISHED Published: 2017-07-07T17:00:00 Last Updated: 2024-08-05T17:11:02.359Z Vendors: n/a Products: Schneider Electric Wonderware ArchestrA Logger Problem Types: CWE-476 Description: A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null pointer dereference vulnerability could allow an attacker to crash the logger process, causing a denial of service for logging and log-viewing (applications that use the Wonderware ArchestrA Logger continue to run when the Wonderware ArchestrA Logger service is unavailable). Additional Analyst Notes: - CVE Program Container: References: -
e Wonderware ArchestrA Logger service is unavailable). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99488 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/ - http://www.securitytracker.com/id/1038836
CVE ID: CVE-2017-9632 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T17:11:02.307Z Vendors: n/a Products: PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch Problem Types: CWE-311 Description: A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely. Additional Analyst Notes: - CVE Program Contain
oss, all versions. The username and password are transmitted insecurely. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03
CVE ID: CVE-2017-9633 State: PUBLISHED Published: 2017-08-07T08:00:00.000Z Last Updated: 2025-05-06T14:56:50.202Z Vendors: n/a Products: Continental AG Infineon S-Gold 2 (PMB 8876) Problem Types: CWE-119 Description: An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid,
015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. A vulnerability in the temporary mobile subscriber identity (TMSI) may allow an attacker to access and control memory. This may allow remote code execution on the baseband radio processor of the TCU. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/100132 - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01
CVE ID: CVE-2017-9634 State: PUBLISHED Published: 2018-04-17T14:00:00Z Last Updated: 2024-09-17T00:02:36.180Z Vendors: Mitsubishi Electric Europe B.V. Products: E-Designer Problem Types: CWE-787 Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01 - http://www.securityfocus.com/bid/100097
CVE ID: CVE-2017-9635 State: PUBLISHED Published: 2018-05-18T13:00:00Z Last Updated: 2024-09-17T03:28:56.779Z Vendors: Schneider Electric SE Products: Ampla MES Problem Types: CWE-326 Description: Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm could be exploited to reverse the user's password. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-18
ble. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/ - http://www.securityfocus.com/bid/99469
CVE ID: CVE-2017-9636 State: PUBLISHED Published: 2018-04-17T14:00:00Z Last Updated: 2024-09-16T18:50:19.596Z Vendors: Mitsubishi Electric Europe B.V. Products: E-Designer Problem Types: CWE-122 Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01 - http://www.securityfocus.com/bid/100097
CVE ID: CVE-2017-9637 State: PUBLISHED Published: 2018-05-18T13:00:00Z Last Updated: 2024-09-17T00:46:48.642Z Vendors: Schneider Electric SE Products: Ampla MES Problem Types: CWE-319 Description: Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/
n as possible. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/ - http://www.securityfocus.com/bid/99469
CVE ID: CVE-2017-9638 State: PUBLISHED Published: 2018-04-17T14:00:00Z Last Updated: 2024-09-17T02:16:13.899Z Vendors: Mitsubishi Electric Europe B.V. Products: E-Designer Problem Types: CWE-121 Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01 - http://www.securityfocus.com/bid/100097
CVE ID: CVE-2017-9639 State: PUBLISHED Published: 2017-07-17T19:00:00 Last Updated: 2024-08-05T17:11:02.361Z Vendors: n/a Products: Fuji Electric V-Server Problem Types: CWE-119 Description: An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer), which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-192-02 - http://www.securityfocus.com/bid/99544
CVE ID: CVE-2017-9640 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T17:11:02.350Z Vendors: n/a Products: Automated Logic Corporation WebCTRL, i-VU, SiteScan Problem Types: CWE-22 Description: A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software. Additional Analyst Notes: - CVE Prog
ed to execute code. This vulnerability does not affect version 6.5 of the software. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100452 - https://www.exploit-db.com/exploits/42543/ - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01
CVE ID: CVE-2017-9641 State: PUBLISHED Published: 2018-05-25T15:00:00Z Last Updated: 2024-09-16T19:20:52.829Z Vendors: OSIsoft Products: PI Coresight Problem Types: CWE-352 Description: PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04 - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320 - http://www.securityfocus.com/bid/99540
CVE ID: CVE-2017-9644 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T17:11:02.361Z Vendors: n/a Products: Automated Logic Corporation WebCTRL, i-VU, SiteScan Problem Types: CWE-428 Description: An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated p
a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100454 - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01 - https://www.exploit-db.com/exploits/42542/
CVE ID: CVE-2017-9645 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-05T17:18:00.372Z Vendors: n/a Products: Mirion Technologies Telemetry Enabled Devices Problem Types: CWE-326 Description: An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). Decryption of data is possible at the hardware level. Additional Analyst Notes: - CVE Program Container: References: - http:
yption of data is possible at the hardware level. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100001 - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02
CVE ID: CVE-2017-9646 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02 - http://www.securityfocus.com/bid/100261
CVE ID: CVE-2017-9647 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T17:18:00.361Z Vendors: n/a Products: Continental AG Infineon S-Gold 2 (PMB 8876) Problem Types: CWE-121 Description: A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and
014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. An attacker with a physical connection to the TCU may exploit a buffer overflow condition that exists in the processing of AT commands. This may allow arbitrary code execution on the baseband radio processor of the TCU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100132 - https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01
CVE ID: CVE-2017-9648 State: PUBLISHED Published: 2017-08-14T16:00:00 Last Updated: 2024-08-05T17:18:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-222-03 - http://www.securityfocus.com/bid/100264