Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-24797 State: PUBLISHED Published: 2025-04-14T23:25:19.152Z Last Updated: 2025-04-21T14:10:47.019Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: meshtastic Products: firmware Problem Types: CWE-119, CWE-122 Description: Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulne
authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r
CVE ID: CVE-2025-24798 State: PUBLISHED Published: 2025-07-10T21:22:30.299Z Last Updated: 2025-07-11T16:51:10.534Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: meshtastic Products: firmware Problem Types: CWE-617 Description: Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a crash. This can lead to a degradation of service for nodes within range of a malicious sender, or via MQTT if downlink is enabled. This vulnerability is fixed in 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/securi
in 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/security/advisories/GHSA-4q84-546j-3mf5 - https://github.com/meshtastic/firmware/commit/dc100e4d3e3dfbf58d3ead8141a49cddb0cbdc19 - https://github.com/meshtastic/firmware/blob/cdcbf4c61550e45c125e17a20aff4275e9389655/src/modules/RoutingModule.cpp#L44-L48
CVE ID: CVE-2025-24799 State: PUBLISHED Published: 2025-03-18T18:27:54.631Z Last Updated: 2025-03-18T18:53:35.088Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-jv89-g7f7-jwfg
CVE ID: CVE-2025-24800 State: PUBLISHED Published: 2025-01-28T15:41:43.461Z Last Updated: 2025-01-28T16:07:48.018Z Vendors: polytope-labs Products: hyperbridge Problem Types: CWE-670, CWE-347 Description: Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or compromise other kinds of cross-chain applications. This vulnerability is fixed in 15.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/polytope-labs/hyperbridge/s
15.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/polytope-labs/hyperbridge/security/advisories/GHSA-wwx5-gpgr-vxr7 - https://github.com/polytope-labs/hyperbridge/pull/372/commits/f0e85db718f5165b06585a49b14a66f8ad643aea - https://github.com/polytope-labs/ismp-substrate/pull/64/commits/5ca3351a19151f1a439c30d5cbdbfdc72a11f1a8#diff-3835cc24fb2011b3e8246036059acd8c2c2a9a869eedf7a210d18edb6543318dL262
CVE ID: CVE-2025-24801 State: PUBLISHED Published: 2025-03-18T18:32:06.401Z Last Updated: 2025-03-18T18:51:51.204Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: glpi-project Products: glpi Problem Types: CWE-434 Description: GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-g2p3-33ff-r555
CVE ID: CVE-2025-24802 State: PUBLISHED Published: 2025-01-30T19:20:14.250Z Last Updated: 2025-01-30T19:55:17.620Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: 0xPolygonZero Products: plonky2 Problem Types: CWE-1240 Description: Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for any lookup table f (unless its length happens to be divisible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side i
ible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. This vulnerability is fixed in 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xPolygonZero/plonky2/security/advisories/GHSA-hj49-h7fq-px5h - https://github.com/0xPolygonZero/plonky2/commit/091047f7f10cae082716f3738ad59a583835f7b6 - https://github.com/0xPolygonZero/plonky2/blob/main/plonky2/src/plonk/prover.rs#L97
CVE ID: CVE-2025-24803 State: PUBLISHED Published: 2025-02-05T18:41:30.040Z Last Updated: 2025-02-12T19:41:05.505Z Vendors: MobSF Products: Mobile-Security-Framework-MobSF Problem Types: CWE-79 Description: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentation for bundle ID's, it must contain only alphanumeric characters (A–Z, a–z, and 0–9), hyphens (-), and periods (.). However, an attacker can manually modify this value in the `Info.plist` file and add special characters to the `<key>CFBundleIdentifier</key>` value. The `dynamic_analysis.html`
e `Info.plist` file and add special characters to the `<key>CFBundleIdentifier</key>` value. The `dynamic_analysis.html` file does not sanitize the received bundle value from Corellium and as a result, it is possible to break the HTML context and achieve Stored XSS. This issue has been addressed in version 4.3.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-cxqq-w3x5-7ph3 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/05206e72cae35b311615a70e51e1a946955c5e83 - https://developer.appl
ithub.com/MobSF/Mobile-Security-Framework-MobSF/commit/05206e72cae35b311615a70e51e1a946955c5e83 - https://developer.apple.com/documentation/bundleresources/information-property-list/cfbundleidentifier
CVE ID: CVE-2025-24804 State: PUBLISHED Published: 2025-02-05T18:41:15.873Z Last Updated: 2025-02-12T19:41:05.675Z Vendors: MobSF Products: Mobile-Security-Framework-MobSF Problem Types: CWE-1287 Description: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentation for bundle ID's, it must contain only alphanumeric characters (A–Z, a–z, and 0–9), hyphens (-), and periods (.). However, an attacker can manually modify this value in the `Info.plist` file and add special characters to the `<key>CFBundleIdentifier</key>` value. When the application pars
the `Info.plist` file and add special characters to the `<key>CFBundleIdentifier</key>` value. When the application parses the wrong characters in the bundle ID, it encounters an error. As a result, it will not display content and will throw a 500 error instead. The only way to make the pages work again is to manually remove the malicious application from the system. This issue has been addressed in version 4.3.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-jrm8-xgf3-fwqr - https://github.com/MobSF/M
://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-jrm8-xgf3-fwqr - https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/05206e72cae35b311615a70e51e1a946955c5e83 - https://developer.apple.com/documentation/bundleresources/information-property-list/cfbundleidentifier
CVE ID: CVE-2025-24805 State: PUBLISHED Published: 2025-02-05T18:41:02.991Z Last Updated: 2025-02-12T19:41:05.811Z Vendors: MobSF Products: Mobile-Security-Framework-MobSF Problem Types: CWE-269 Description: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privileges is able to make use of an access token for materials for scopes which it should not be accepted. This issue has been addressed in version 4.3.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment:
ed to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-79f6-p65j-3m2m - https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/05206e72cae35b311615a70e51e1a946955c5e83
CVE ID: CVE-2025-24806 State: PUBLISHED Published: 2025-02-19T17:19:30.909Z Last Updated: 2025-02-19T18:39:15.855Z Vendors: authelia Products: authelia Problem Types: CWE-307 Description: Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. If users are allowed to sign in via both username and email the regulation system treats these as separate login events. This leads to the regulation limitations being effectively doubled assuming an attacker using brute-force to find a user password. It's important to note that due to the effective operation of regulation where no user-facing sig
find a user password. It's important to note that due to the effective operation of regulation where no user-facing sign of their regulation ban being visible either via timing or via API responses, it's effectively impossible to determine if a failure occurs due to a bad username password combination, or a effective ban blocking the attempt which heavily mitigates any form of brute-force. This occurs because the records and counting process for this system uses the method utilized for sign in rather than the effective username attribute. This has a minimal impact on account security, this impact is increased naturally in scenarios when there is no two-factor authentication required and wea
nt security, this impact is increased naturally in scenarios when there is no two-factor authentication required and weak passwords are used. This makes it a bit easier to brute-force a password. A patch for this issue has been applied to versions 4.38.19, and 4.39.0. Users are advised to upgrade. Users unable to upgrade should 1. Not heavily modify the default settings in a way that ends up with shorter or less frequent regulation bans. The default settings effectively mitigate any potential for this issue to be exploited. and 2. Disable the ability for users to login via an email address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authelia/authelia/
an email address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authelia/authelia/security/advisories/GHSA-m5mf-3963-4x26 - https://github.com/authelia/authelia/commit/d4a54189aa6563912f9427b96dcb01eacafa785c
CVE ID: CVE-2025-24807 State: PUBLISHED Published: 2025-02-11T15:31:50.337Z Last Updated: 2025-02-11T16:12:41.714Z Vendors: eProsima Products: Fast-DDS Problem Types: CWE-345 Description: eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access control plugin validates only the S/MIME signature which causes an expired PermissionsCA to be taken as valid. Even though this issue is responsible for allowing `governance/permissions` from an expired PermissionsCA
ken as valid. Even though this issue is responsible for allowing `governance/permissions` from an expired PermissionsCA and having the system crash when PermissionsCA is not self-signed and contains the full-chain, the impact is low. Versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0 contain a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-w33g-jmm2-8983 - https://github.com/eProsima/Fast-DDS/pull/5530 - https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/accesscontrol/Permissions.cpp#L390-L396 - https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/accesscontrol/P
cesscontrol/Permissions.cpp#L390-L396 - https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/accesscontrol/Permissions.cpp#L412 - https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/authentication/PKIDH.cpp#L241 - https://www.omg.org/spec/DDS-SECURITY/1.1/PDF
CVE ID: CVE-2025-24808 State: PUBLISHED Published: 2025-03-26T14:08:38.915Z Last Updated: 2025-03-26T18:26:18.555Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-362 Description: Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users
ondition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-hfcx-qjw6-573r - https://github.com/discourse/discourse/commit/a16b2f224860f6678f89f5ffa012f0ede17e4095
CVE ID: CVE-2025-24810 State: PUBLISHED Published: 2025-01-28T04:36:53.852Z Last Updated: 2025-01-28T14:59:09.996Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Rahe Products: Simple Image Sizes Problem Types: CWE-79 Description: Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/simple-image-sizes/#developers - https://jvn.jp/en/
- CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/simple-image-sizes/#developers - https://jvn.jp/en/jp/JVN88046370/
CVE ID: CVE-2025-24811 State: PUBLISHED Published: 2025-02-11T10:29:14.081Z Last Updated: 2025-02-12T20:51:43.820Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SIMATIC S7-1200 CPU 1211C AC/DC/Rly, SIMATIC S7-1200 CPU 1211C DC/DC/DC, SIMATIC S7-1200 CPU 1211C DC/DC/Rly, SIMATIC S7-1200 CPU 1212C AC/DC/Rly, SIMATIC S7-1200 CPU 1212C DC/DC/DC, SIMATIC S7-1200 CPU 1212C DC/DC/Rly, SIMATIC S7-1200 CPU 1212FC DC/DC/DC, SIMATIC S7-1200 CPU 1212FC DC/DC/Rly, SIMATIC S7-1200 CPU 1214C AC/DC/Rly, SIMATIC S7-1200 CPU 1214C DC/DC/DC, SIMATIC S7-1200 CPU 1214C DC/DC/Rly, SIMATIC S7-1200 CPU 1214FC DC/DC/DC, SIMATIC S7-1200 CPU 1214FC DC/DC/Rly, SIMATIC
SIMATIC S7-1200 CPU 1214C DC/DC/Rly, SIMATIC S7-1200 CPU 1214FC DC/DC/DC, SIMATIC S7-1200 CPU 1214FC DC/DC/Rly, SIMATIC S7-1200 CPU 1215C AC/DC/Rly, SIMATIC S7-1200 CPU 1215C DC/DC/DC, SIMATIC S7-1200 CPU 1215C DC/DC/Rly, SIMATIC S7-1200 CPU 1215FC DC/DC/DC, SIMATIC S7-1200 CPU 1215FC DC/DC/Rly, SIMATIC S7-1200 CPU 1217C DC/DC/DC, SIPLUS S7-1200 CPU 1212 AC/DC/RLY, SIPLUS S7-1200 CPU 1212 DC/DC/RLY, SIPLUS S7-1200 CPU 1212C DC/DC/DC, SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214 AC/DC/RLY, SIPLUS S7-1200 CPU 1214 DC/DC/DC, SIPLUS S7-1200 CPU 1214 DC/DC/RLY, SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214FC DC/DC/DC, SIPLUS S7-1200 CPU 1214FC DC/DC/RLY, SIPL
Y, SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214FC DC/DC/DC, SIPLUS S7-1200 CPU 1214FC DC/DC/RLY, SIPLUS S7-1200 CPU 1215 AC/DC/RLY, SIPLUS S7-1200 CPU 1215 DC/DC/DC, SIPLUS S7-1200 CPU 1215 DC/DC/RLY, SIPLUS S7-1200 CPU 1215C DC/DC/DC, SIPLUS S7-1200 CPU 1215FC DC/DC/DC Problem Types: CWE-404 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1H
12-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1H
15-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0)
B0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 C
0 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (
DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). Affected devices do not process correctly certain special crafted packets sent to port 80/tcp, which could allow an unauthenticated attacker to cause a denial of service in the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-224824.html
CVE ID: CVE-2025-24812 State: PUBLISHED Published: 2025-02-11T10:29:16.319Z Last Updated: 2025-02-12T20:51:43.652Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC S7-1200 CPU 1211C AC/DC/Rly, SIMATIC S7-1200 CPU 1211C DC/DC/DC, SIMATIC S7-1200 CPU 1211C DC/DC/Rly, SIMATIC S7-1200 CPU 1212C AC/DC/Rly, SIMATIC S7-1200 CPU 1212C DC/DC/DC, SIMATIC S7-1200 CPU 1212C DC/DC/Rly, SIMATIC S7-1200 CPU 1212FC DC/DC/DC, SIMATIC S7-1200 CPU 1212FC DC/DC/Rly, SIMATIC S7-1200 CPU 1214C AC/DC/Rly, SIMATIC S7-1200 CPU 1214C DC/DC/DC, SIMATIC S7-1200 CPU 1214C DC/DC/Rly, SIMATIC S7-1200 CPU 1214FC DC/DC/DC, SIMATIC S7-1200 CPU 1214FC DC
1214C DC/DC/DC, SIMATIC S7-1200 CPU 1214C DC/DC/Rly, SIMATIC S7-1200 CPU 1214FC DC/DC/DC, SIMATIC S7-1200 CPU 1214FC DC/DC/Rly, SIMATIC S7-1200 CPU 1215C AC/DC/Rly, SIMATIC S7-1200 CPU 1215C DC/DC/DC, SIMATIC S7-1200 CPU 1215C DC/DC/Rly, SIMATIC S7-1200 CPU 1215FC DC/DC/DC, SIMATIC S7-1200 CPU 1215FC DC/DC/Rly, SIMATIC S7-1200 CPU 1217C DC/DC/DC, SIPLUS S7-1200 CPU 1212 AC/DC/RLY, SIPLUS S7-1200 CPU 1212 DC/DC/RLY, SIPLUS S7-1200 CPU 1212C DC/DC/DC, SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214 AC/DC/RLY, SIPLUS S7-1200 CPU 1214 DC/DC/DC, SIPLUS S7-1200 CPU 1214 DC/DC/RLY, SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214FC DC/DC/DC, SIPLUS S7-1200 CPU 1214FC
PU 1214 DC/DC/RLY, SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL, SIPLUS S7-1200 CPU 1214FC DC/DC/DC, SIPLUS S7-1200 CPU 1214FC DC/DC/RLY, SIPLUS S7-1200 CPU 1215 AC/DC/RLY, SIPLUS S7-1200 CPU 1215 DC/DC/DC, SIPLUS S7-1200 CPU 1215 DC/DC/RLY, SIPLUS S7-1200 CPU 1215C DC/DC/DC, SIPLUS S7-1200 CPU 1215FC DC/DC/DC Problem Types: CWE-1286 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) (All versions < V4.7),
S7211-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU