Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7529 State: PUBLISHED Published: 2020-09-16T15:39:54 Last Updated: 2024-08-04T09:33:19.515Z Vendors: n/a Products: SCADAPack 7x Remote Connect V3.6.3.574 and prior. Problem Types: CWE-22 Description: A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE ID: CVE-2020-7530 State: PUBLISHED Published: 2020-09-16T15:40:12 Last Updated: 2024-08-04T09:33:19.799Z Vendors: n/a Products: SCADAPack 7x Remote Connect V3.6.3.574 and prior. Problem Types: CWE-285 Description: A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE ID: CVE-2020-7531 State: PUBLISHED Published: 2020-09-16T15:40:39 Last Updated: 2024-08-04T09:33:19.506Z Vendors: n/a Products: SCADAPack 7x Remote Connect V3.6.3.574 and prior. Problem Types: CWE-284 Description: A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE ID: CVE-2020-7532 State: PUBLISHED Published: 2020-09-16T15:40:47 Last Updated: 2024-08-04T09:33:19.457Z Vendors: n/a Products: SCADAPack x70 Security Administrator V1.2.0 and prior. Problem Types: CWE-502 Description: A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE ID: CVE-2020-7533 State: PUBLISHED Published: 2020-12-01T14:47:02 Last Updated: 2025-06-10T08:02:15.209Z Vendors: n/a Products: Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information) Problem Types: CWE-287 Description: CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_File_Name=SEVD-2020-287-01_Modicon_Web_Server_Security_Notificatiton.pdf&
ttps://download.schneider-electric.com/files?p_File_Name=SEVD-2020-287-01_Modicon_Web_Server_Security_Notificatiton.pdf&p_Doc_Ref=SEVD-2020-287-01&p_enDocType=Security+and+Safety+Notice
CVE ID: CVE-2020-7534 State: PUBLISHED Published: 2022-02-04T22:29:36 Last Updated: 2024-08-04T09:33:19.804Z Vendors: n/a Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) Problem Types: CWE-352 Description: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or
ss-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) (All Versions) Additional Analyst Notes: - CVE Program Container: References: - http
40NOC78*00, TSXETY5103, TSXETY4103) (All Versions) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-01
CVE ID: CVE-2020-7535 State: PUBLISHED Published: 2020-12-11T00:51:37 Last Updated: 2024-08-04T09:33:19.664Z Vendors: n/a Products: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a speciall
es (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-05/
CVE ID: CVE-2020-7536 State: PUBLISHED Published: 2020-12-11T00:46:18 Last Updated: 2024-08-04T09:33:19.463Z Vendors: n/a Products: Modicon M340 CPUs (BMXP34* versions prior to V3.30) and Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4, BMXNOE0110 (H) versions prior to V6.6, and BMXNOR0200H all versions) Problem Types: CWE-754 Description: A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) Modicon M340 Communication Ethernet modules (BMXNOE0100 (H) versions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be un
ions prior to V3.4 BMXNOE0110 (H) versions prior to V6.6 BMXNOR0200H all versions), that could cause the device to be unreachable when modifying network parameters over SNMP. Additional Analyst Notes: - CVE Program Container: References: - https://security.cse.iitk.ac.in/responsible-disclosure - https://www.se.com/ww/en/download/document/SEVD-2020-343-07/
CVE ID: CVE-2020-7537 State: PUBLISHED Published: 2020-12-11T00:51:52 Last Updated: 2024-08-04T09:33:19.484Z Vendors: n/a Products: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Additional Analyst Notes: - CVE Program Container:
Read Physical Memory request over Modbus is sent to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
CVE ID: CVE-2020-7538 State: PUBLISHED Published: 2020-11-19T21:04:18 Last Updated: 2024-08-04T09:33:19.804Z Vendors: n/a Products: PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-07/
CVE ID: CVE-2020-7539 State: PUBLISHED Published: 2020-12-11T00:51:57 Last Updated: 2024-08-04T09:33:19.565Z Vendors: n/a Products: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) Problem Types: CWE-754 Description: A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller o
ersions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-03/
CVE ID: CVE-2020-7540 State: PUBLISHED Published: 2020-12-11T00:52:03 Last Updated: 2024-08-04T09:33:19.892Z Vendors: n/a Products: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests. Additional A
), that could cause unauthenticated command execution in the controller when sending special HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-04/
CVE ID: CVE-2020-7541 State: PUBLISHED Published: 2020-12-11T00:52:09 Last Updated: 2024-08-04T09:33:19.936Z Vendors: n/a Products: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) Problem Types: CWE-425 Description: A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP. Additional
uld cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-03/
CVE ID: CVE-2020-7542 State: PUBLISHED Published: 2020-12-11T00:52:14 Last Updated: 2024-08-04T09:33:19.616Z Vendors: n/a Products: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Additional Analyst Notes: - CVE Program Container:
CVE ID: CVE-2020-7543 State: PUBLISHED Published: 2020-12-11T00:52:21 Last Updated: 2024-08-04T09:33:19.525Z Vendors: n/a Products: Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller. Additional Analyst Notes: - CVE Program Container:
CVE ID: CVE-2020-7544 State: PUBLISHED Published: 2020-11-19T21:05:04 Last Updated: 2024-08-04T09:33:19.866Z Vendors: n/a Products: EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) Problem Types: CWE-269 Description: A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-02/
CVE ID: CVE-2020-7545 State: PUBLISHED Published: 2020-12-01T14:44:10 Last Updated: 2024-08-04T09:33:19.761Z Vendors: n/a Products: EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) Problem Types: CWE-284 Description: A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for arbitrary code execution on the server when an authorized user access an affected webpage. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-287-
ditional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
CVE ID: CVE-2020-7546 State: PUBLISHED Published: 2020-12-01T14:44:31 Last Updated: 2024-08-04T09:33:19.932Z Vendors: n/a Products: EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow an attacker to perform actions on behalf of the authorized user when accessing an affected webpage. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.co
r when accessing an affected webpage. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
CVE ID: CVE-2020-7547 State: PUBLISHED Published: 2020-12-01T14:44:52 Last Updated: 2024-08-04T09:33:19.887Z Vendors: n/a Products: EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) Problem Types: CWE-284 Description: A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
CVE ID: CVE-2020-7548 State: PUBLISHED Published: 2020-12-01T14:45:23 Last Updated: 2024-08-04T09:33:19.533Z Vendors: n/a Products: Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) Problem Types: CWE-330 Description: A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-287-03/
CVE ID: CVE-2020-7549 State: PUBLISHED Published: 2020-12-11T00:52:26 Last Updated: 2024-08-04T09:33:19.948Z Vendors: n/a Products: Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the c
versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-343-06/
CVE ID: CVE-2020-7550 State: PUBLISHED Published: 2020-11-19T21:06:54 Last Updated: 2024-08-04T09:33:19.868Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-119 Description: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 and prior that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-092/
CVE ID: CVE-2020-7551 State: PUBLISHED Published: 2020-11-19T21:07:09 Last Updated: 2024-08-04T09:33:19.946Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE ID: CVE-2020-7552 State: PUBLISHED Published: 2020-11-19T21:07:16 Last Updated: 2024-08-04T09:33:19.511Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE ID: CVE-2020-7553 State: PUBLISHED Published: 2020-11-19T21:07:23 Last Updated: 2024-08-04T09:33:19.901Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-787 Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-124/
CVE ID: CVE-2020-7554 State: PUBLISHED Published: 2020-11-19T21:07:32 Last Updated: 2024-08-04T09:33:19.526Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-119 Description: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-093/
CVE ID: CVE-2020-7555 State: PUBLISHED Published: 2020-11-19T21:08:00 Last Updated: 2024-08-04T09:33:19.526Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-787 Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-094/
CVE ID: CVE-2020-7556 State: PUBLISHED Published: 2020-11-19T21:08:08 Last Updated: 2024-08-04T09:33:19.589Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-787 Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-095/
CVE ID: CVE-2020-7557 State: PUBLISHED Published: 2020-11-19T21:08:14 Last Updated: 2024-08-04T09:33:19.872Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-125 Description: A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-096/
CVE ID: CVE-2020-7558 State: PUBLISHED Published: 2020-11-19T21:08:21 Last Updated: 2024-08-04T09:33:19.878Z Vendors: n/a Products: IGSS Definition (Def.exe) version 14.0.0.20247 and prior Problem Types: CWE-787 Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ - https://www.zerodayinitiative.com/advisories/ZDI-21-091/
CVE ID: CVE-2020-7559 State: PUBLISHED Published: 2020-11-19T21:04:25 Last Updated: 2024-08-04T09:33:19.465Z Vendors: n/a Products: PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) Problem Types: CWE-120 Description: A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-07
tional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-315-07 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1140