Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12497 State: PUBLISHED Published: 2020-07-01T15:52:35 Last Updated: 2024-08-04T11:56:52.059Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Phoenix Contact Products: Automation Worx, Automation Worx Express Problem Types: CWE-121 Description: PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-023 - https://www.zerodayinitiative.com/advisories/Z
ainer: References: - https://cert.vde.com/de-de/advisories/vde-2020-023 - https://www.zerodayinitiative.com/advisories/ZDI-20-825/ - https://www.zerodayinitiative.com/advisories/ZDI-21-398/
CVE ID: CVE-2020-12498 State: PUBLISHED Published: 2020-07-01T15:52:35 Last Updated: 2024-08-04T11:56:52.080Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Phoenix Contact Products: Automation Worx, Automation Worx Express Problem Types: CWE-121 Description: mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-023 - https://www.zerodayinitiative.c
VE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-023 - https://www.zerodayinitiative.com/advisories/ZDI-20-826/
CVE ID: CVE-2020-12499 State: PUBLISHED Published: 2020-07-21T15:09:40.065169Z Last Updated: 2024-09-17T03:18:07.103Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: PLCnext Engineer Problem Types: CWE-22 Description: In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-025
CVE ID: CVE-2020-12500 State: PUBLISHED Published: 2020-10-15T18:42:54.978315Z Last Updated: 2024-09-17T01:10:49.072Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepperl+Fuchs, Korenix, Westermo Products: P+F Comtrol RocketLinx, JetNet, PMI-110-F2G Problem Types: CWE-306 Description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-0
ation. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclists.org/fulldisclosure/2021/Jun/0 - http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE ID: CVE-2020-12501 State: PUBLISHED Published: 2020-10-15T18:42:56.306067Z Last Updated: 2024-09-16T19:20:40.911Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepperl+Fuchs, Korenix, Westermo Products: P+F Comtrol RocketLinx, JetNet, PMI-110-F2G Problem Types: CWE-798 Description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclist
nalyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclists.org/fulldisclosure/2021/Jun/0 - http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html - http://seclists.org/fulldisclosure/2022/Jun/3 - http://packetstormsecurity.com/files/167409/Korenix-JetPort-5601V3-Backdoor-Account.html
CVE ID: CVE-2020-12502 State: PUBLISHED Published: 2020-10-15T18:42:57.229561Z Last Updated: 2024-09-16T18:43:33.813Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Pepperl+Fuchs, Korenix, Westermo Products: P+F Comtrol RocketLinx, JetNet, PMI-110-F2G Problem Types: CWE-352 Description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration. Additional Analyst Notes: - CVE Program
4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclists.org/fulldisclosure/2021/Jun/0 - http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ - https://cert.vde.com/en-us/advisories/vde-2020-053 - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE ID: CVE-2020-12503 State: PUBLISHED Published: 2020-10-15T18:42:58.016798Z Last Updated: 2024-09-17T04:24:41.310Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepperl+Fuchs, Korenix, Westermo Products: P+F Comtrol RocketLinx, JetNet, PMI-110-F2G Problem Types: CWE-863 Description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections. Additional Analyst Notes: - CVE Prog
4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclists.org/fulldisclosure/2021/Jun/0 - http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ - https://cert.vde.com/en-us/advisories/vde-2020-053 - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE ID: CVE-2020-12504 State: PUBLISHED Published: 2020-10-15T18:42:59.041481Z Last Updated: 2024-09-16T17:09:09.147Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepperl+Fuchs, Korenix, Westermo Products: P+F Comtrol RocketLinx, JetNet, PMI-110-F2G Problem Types: CWE-912 Description: Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service. Additional Analyst Notes: - CVE Program Container: Referenc
J45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-040 - http://seclists.org/fulldisclosure/2021/Jun/0 - http://packetstormsecurity.com/files/162903/Korenix-CSRF-Backdoor-Accounts-Command-Injection-Missing-Authentication.html - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ - https://cert.vde.com/en-us/advisories/vde-2020-053 - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE ID: CVE-2020-12505 State: PUBLISHED Published: 2020-09-30T15:43:20.359532Z Last Updated: 2024-09-16T18:08:56.055Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: WAGO Products: 750-852, 750-880/xxx-xxx, 750-881, 750-831/xxx-xxx, 750-882, 750-885/xxx-xxx, 750-889 Problem Types: CWE-306 Description: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below. Additional Analyst Notes: - CVE Pr
xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-027
CVE ID: CVE-2020-12506 State: PUBLISHED Published: 2020-09-30T15:43:20.405315Z Last Updated: 2024-09-17T00:06:46.518Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: WAGO Products: 750-362, 750-363, 750-823, 750-832/xxx-xxx, 750-862, 750-891, 750-890/xxx-xxx Problem Types: CWE-306 Description: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior
750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-028
CVE ID: CVE-2020-12507 State: PUBLISHED Published: 2022-11-07T09:39:53.104Z Last Updated: 2025-05-01T17:35:11.738Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: s::can Products: moni:tools Problem Types: CWE-89 Description: In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.s-can.at/en/the-new-monitool-v4-2-security-first/
CVE ID: CVE-2020-12508 State: PUBLISHED Published: 2022-11-07T09:42:05.016Z Last Updated: 2025-05-01T14:55:22.349Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: s::can Products: moni::tools Problem Types: CWE-22 Description: In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.s-can.at/en/the-new-monitool-v4-2-security-first/
CVE ID: CVE-2020-12509 State: PUBLISHED Published: 2022-11-07T09:42:27.370Z Last Updated: 2025-05-02T18:32:10.132Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: s::can Products: moni::tools Problem Types: CWE-22 Description: In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.s-can.at/en/the-new-monitool-v4-2-security-first/
CVE ID: CVE-2020-12510 State: PUBLISHED Published: 2020-11-19T17:07:24.391114Z Last Updated: 2024-09-16T19:35:02.758Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Beckhoff Products: TwinCat XAR 3.1 Problem Types: CWE-276 Description: The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions which allow every local user to modify the content. The default installation registers TcSysUI.exe for automatic execution upon log in of a user. If a less privileged user has a local account he or she can replace TcSysUI.exe. It will b
cution upon log in of a user. If a less privileged user has a local account he or she can replace TcSysUI.exe. It will be executed automatically by another user during login. This is also true for users with administrative access. Consequently, a less privileged user can trick a higher privileged user into executing code he or she modified this way. By default Beckhoff’s IPCs are shipped with TwinCAT software installed this way and with just a single local user configured. Thus the vulnerability exists if further less privileged users have been added. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-037
CVE ID: CVE-2020-12511 State: PUBLISHED Published: 2021-01-22T19:01:56.348052Z Last Updated: 2024-09-17T01:12:08.951Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Pepper+Fuchs Products: Comtrol IO-Link Master Problem Types: CWE-352 Description: Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038
CVE ID: CVE-2020-12512 State: PUBLISHED Published: 2021-01-22T19:01:56.557719Z Last Updated: 2024-09-17T00:40:47.141Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepper+Fuchs Products: Comtrol IO-Link Master Problem Types: CWE-79 Description: Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038
CVE ID: CVE-2020-12513 State: PUBLISHED Published: 2021-01-22T19:01:56.657624Z Last Updated: 2024-09-16T17:13:55.439Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepper+Fuchs Products: Comtrol IO-Link Master Problem Types: CWE-78 Description: Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038
CVE ID: CVE-2020-12514 State: PUBLISHED Published: 2021-01-22T19:01:56.769686Z Last Updated: 2024-09-16T19:40:53.649Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Pepper+Fuchs Products: Comtrol IO-Link Master Problem Types: CWE-476 Description: Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038
CVE ID: CVE-2020-12515 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2020-12516 State: PUBLISHED Published: 2020-12-10T03:04:17.186342Z Last Updated: 2024-09-16T22:14:10.360Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: WAGO Products: 750-331/xxx-xxx, 750-352, 750-829, 750-831/xxx-xxx, 750-852, 750-880/xxx-xxx, 750-881, 750-882, 750-885, 750-889 Problem Types: CWE-400 Description: Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01 - https://cert.vde.com/en-us/advisories/vde-2020-042
CVE ID: CVE-2020-12517 State: PUBLISHED Published: 2020-12-17T22:43:14.320752Z Last Updated: 2024-09-16T22:10:20.898Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Phoenix Contact Products: AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165) Problem Types: CWE-79 Description: On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation). Additional Analyst Notes: - CVE Prog
hts when the admin user visits the vulnerable website (local privilege escalation). Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-049
CVE ID: CVE-2020-12518 State: PUBLISHED Published: 2020-12-17T22:43:14.453367Z Last Updated: 2024-09-17T01:50:39.329Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Phoenix Contact Products: AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165) Problem Types: CWE-200 Description: On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde
e information to plan further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-049
CVE ID: CVE-2020-12519 State: PUBLISHED Published: 2020-12-17T22:43:14.555150Z Last Updated: 2024-09-17T01:21:36.619Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Phoenix Contact Products: AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165) Problem Types: CWE-269 Description: On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-049
CVE ID: CVE-2020-12520 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2020-12521 State: PUBLISHED Published: 2020-12-17T22:43:14.654841Z Last Updated: 2024-09-17T04:14:26.064Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Phoenix Contact Products: AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165) Problem Types: CWE-20 Description: On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot. Additional Analyst Notes: - CVE Program Container: Re
ttacker can cause failure of system services or a complete reboot. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-049
CVE ID: CVE-2020-12522 State: PUBLISHED Published: 2020-12-17T22:40:48.065139Z Last Updated: 2024-09-16T18:14:32.808Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: WAGO Products: Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) Problem Types: CWE-78 Description: The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago
ith specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-045
CVE ID: CVE-2020-12523 State: PUBLISHED Published: 2020-12-17T22:43:14.788183Z Last Updated: 2024-09-16T19:04:46.625Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Phoenix Contact, Innominate Products: TC MGUARD RS4000 4G VZW VPN (1010461), TC MGUARD RS4000 4G ATT VPN (1010463), FL MGUARD RS4004 TX/DTX (2701876), FL MGUARD RS4004 TX/DTX VPN (2701877), TC MGUARD RS4000 3G VPN (2903440), TC MGUARD RS4000 4G VPN (2903586), Innominate mGuard rs4000 4TX/TX, Innominate mGuard rs4000 4TX/TX VPN, Innominate mGuard rs4000 4TX/3G/TX VPN Problem Types: CWE-909 Description: On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot e
es: CWE-909 Description: On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-046
CVE ID: CVE-2020-12524 State: PUBLISHED Published: 2020-12-02T14:39:20.197008Z Last Updated: 2024-09-17T03:58:57.990Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Phoenix Contact Products: BTP Touch Panel Problem Types: CWE-400 Description: Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service). Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-047
CVE ID: CVE-2020-12525 State: PUBLISHED Published: 2021-01-22T19:01:56.886079Z Last Updated: 2024-09-16T23:11:43.568Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: M&M Software, Pepperl+Fuchs/PACTware, Weidmüller Products: fdtCONTAINER Component, fdtCONTAINER Application, dtmlINSPECTOR, PACTware, WI Manager Problem Types: CWE-502 Description: M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038 - https://us-cert.cisa.gov/ics/a
CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-038 - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05