Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27232 State: PUBLISHED Published: 2021-05-10T19:06:47 Last Updated: 2024-08-04T16:11:36.179Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1206
CVE ID: CVE-2020-27233 State: PUBLISHED Published: 2021-04-13T14:07:02 Last Updated: 2024-08-04T16:11:36.033Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the supplierUID parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27234 State: PUBLISHED Published: 2021-04-13T14:07:10 Last Updated: 2024-08-04T16:11:36.140Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27235 State: PUBLISHED Published: 2021-04-13T14:07:17 Last Updated: 2024-08-04T16:11:36.132Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27236 State: PUBLISHED Published: 2021-04-13T14:07:27 Last Updated: 2024-08-04T16:11:36.250Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27237 State: PUBLISHED Published: 2021-04-15T13:37:58 Last Updated: 2024-08-04T16:11:36.298Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27238 State: PUBLISHED Published: 2021-04-15T13:38:25 Last Updated: 2024-08-04T16:11:36.352Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27239 State: PUBLISHED Published: 2021-04-15T13:38:43 Last Updated: 2024-08-04T16:11:36.265Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27240 State: PUBLISHED Published: 2021-04-19T20:33:33 Last Updated: 2024-08-04T16:11:36.315Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27241 State: PUBLISHED Published: 2021-04-19T20:33:41 Last Updated: 2024-08-04T16:11:36.283Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE ID: CVE-2020-27242 State: PUBLISHED Published: 2021-05-11T10:35:58 Last Updated: 2024-08-04T16:11:36.409Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoLocation parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208
CVE ID: CVE-2020-27243 State: PUBLISHED Published: 2021-05-11T10:36:04 Last Updated: 2024-08-04T16:11:36.305Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208
CVE ID: CVE-2020-27244 State: PUBLISHED Published: 2021-05-11T10:36:11 Last Updated: 2024-08-04T16:11:36.310Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208
CVE ID: CVE-2020-27245 State: PUBLISHED Published: 2021-05-11T10:48:19 Last Updated: 2024-08-04T16:11:36.287Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208
CVE ID: CVE-2020-27246 State: PUBLISHED Published: 2021-05-11T10:48:24 Last Updated: 2024-08-04T16:11:36.415Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OpenClinic GA Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208
CVE ID: CVE-2020-27247 State: PUBLISHED Published: 2021-02-04T06:13:30 Last Updated: 2024-08-04T16:11:36.415Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-122 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0002, an attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). Additional
ger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210
CVE ID: CVE-2020-27248 State: PUBLISHED Published: 2021-02-04T06:13:54 Last Updated: 2024-08-04T16:11:36.271Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-122 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0003 and 0x0014, an attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014).
ent to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210
CVE ID: CVE-2020-27249 State: PUBLISHED Published: 2021-02-04T06:14:15 Last Updated: 2024-08-04T16:11:36.286Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-122 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0004 and 0x0015, an attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014).
CVE ID: CVE-2020-27250 State: PUBLISHED Published: 2021-02-10T21:39:35 Last Updated: 2024-08-04T16:11:36.307Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: SoftMaker Problem Types: CWE-122 Description: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow at Version/Instance 0x0005 and 0x0016. An attacker can entice the victim to open a document to trigger this vulnerability. Additional
stance 0x0005 and 0x0016. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210
CVE ID: CVE-2020-27251 State: PUBLISHED Published: 2020-11-26T01:40:42 Last Updated: 2024-08-04T16:11:36.407Z Vendors: n/a Products: FactoryTalk Linx Problem Types: CWE-122 Description: A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious port ranges, which could result in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE ID: CVE-2020-27252 State: PUBLISHED Published: 2020-12-14T19:19:00 Last Updated: 2025-05-22T19:39:10.747Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Medtronic Products: Smart Model 25000 Patient Reader Problem Types: CWE-367 Description: Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader. If exploited, an attacker could remotely execute code on the MCL Smart Patient Reader device, leading to control of the device. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtroni
ading to control of the device. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-smart-security-vulnerability-patch.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-345-01
CVE ID: CVE-2020-27253 State: PUBLISHED Published: 2020-11-26T01:36:27 Last Updated: 2024-08-04T16:11:36.421Z Vendors: n/a Products: FactoryTalk Linx Problem Types: CWE-20 Description: A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to specifically craft a malicious packet resulting in a denial-of-service condition on the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE ID: CVE-2020-27254 State: PUBLISHED Published: 2020-12-21T17:04:24 Last Updated: 2024-08-04T16:11:36.434Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-287 Description: Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-352-01
CVE ID: CVE-2020-27255 State: PUBLISHED Published: 2020-11-26T01:38:44 Last Updated: 2024-08-04T16:11:36.395Z Vendors: n/a Products: FactoryTalk Linx Problem Types: CWE-122 Description: A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01
CVE ID: CVE-2020-27256 State: PUBLISHED Published: 2021-01-19T20:46:30 Last Updated: 2024-08-04T16:11:36.321Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-798 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN in the physician menu of the insulin pump allows attackers with physical access to change insulin therapy settings. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27257 State: PUBLISHED Published: 2021-02-09T14:10:19.507744Z Last Updated: 2024-09-17T02:47:28.530Z Vendors: Omron Products: CX-One, CX-Protocol, CX-Server, CX-Position Problem Types: CWE-843 Description: This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-184/
CVE ID: CVE-2020-27258 State: PUBLISHED Published: 2021-01-19T20:46:40 Last Updated: 2024-08-04T16:11:36.409Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-522 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27259 State: PUBLISHED Published: 2021-02-09T14:09:11.732043Z Last Updated: 2024-09-16T16:33:13.557Z Vendors: Omron Products: CX-One, CX-Protocol, CX-Server, CX-Position Problem Types: CWE-822 Description: The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-182/
CVE ID: CVE-2020-27260 State: PUBLISHED Published: 2021-01-08T15:17:09 Last Updated: 2024-08-04T16:11:36.335Z Vendors: n/a Products: BIGCOMPANYSOFT SOFTWARE PRODUCT Problem Types: CWE-74 Description: Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically proximate attackers with a connected barcode reader to inject HL7 v2.x segments into specific HL7 v2.x messages via multiple expected parameters. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01
CVE ID: CVE-2020-27261 State: PUBLISHED Published: 2021-02-09T14:09:34.782476Z Last Updated: 2024-09-17T00:02:18.058Z Vendors: Omron Products: CX-One, CX-Protocol, CX-Server, CX-Position Problem Types: CWE-121 Description: The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-183/ - https://www.zerodayinitiative.com/advisories/ZDI-21-185/
CVE ID: CVE-2020-27262 State: PUBLISHED Published: 2021-01-08T15:16:44 Last Updated: 2024-08-04T16:11:36.419Z Vendors: n/a Products: Innokas Yhtymä Oy Vital Signs Monitor VC150 Problem Types: CWE-79 Description: Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability exists in the affected products that allow an attacker to inject arbitrary web script or HTML via the filename parameter to multiple update endpoints of the administrative web interface. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01
CVE ID: CVE-2020-27263 State: PUBLISHED Published: 2021-01-13T23:30:08 Last Updated: 2024-08-04T16:11:36.407Z Vendors: n/a Products: PTC Kepware KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, Software Toolbox TOP Server Problem Types: CWE-122 Description: KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-b
ndustrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02
CVE ID: CVE-2020-27264 State: PUBLISHED Published: 2021-01-19T20:46:53 Last Updated: 2024-08-04T16:11:36.425Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-330 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications use deterministic keys, which allows unauthenticated, physically proximate attackers to brute-force the keys via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27265 State: PUBLISHED Published: 2021-01-13T23:33:45 Last Updated: 2024-08-04T16:11:36.330Z Vendors: n/a Products: PTC Kepware KEPServerEX; ThingWorx Industrial Connectivity; OPC-Aggregator; Rockwell Automation KEPServer Enterprise; GE Digital Industrial Gateway Server; Software Toolbox TOP Server Problem Types: CWE-121 Description: KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. Open
v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02