Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
VE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199247
CVE ID: CVE-2021-20573 State: PUBLISHED Published: 2021-06-28T16:10:22.389690Z Last Updated: 2024-09-17T04:10:29.068Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/AC:L/AV:N/C:N/I:N/S:U/PR:L/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Identity Manager Adapters Problem Types: Denial of Service Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199249. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com
E Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199249
CVE ID: CVE-2021-20574 State: PUBLISHED Published: 2021-06-28T16:10:23.986250Z Last Updated: 2024-09-16T23:25:44.567Z Severity: HIGH (CVSS 7.5 CVSS:3.0/PR:L/S:U/A:H/AC:H/AV:N/UI:N/I:H/C:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Identity Manager Adapters Problem Types: Gain Privileges Description: IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and takeover other accounts. IBM X-Force ID: 199252. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6465875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199252
CVE ID: CVE-2021-20575 State: PUBLISHED Published: 2021-05-31T14:50:16.841661Z Last Updated: 2024-09-16T23:25:46.202Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:L/AV:L/C:L/S:U/PR:N/UI:N/I:N/A:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199278
CVE ID: CVE-2021-20576 State: PUBLISHED Published: 2021-05-31T14:50:17.494688Z Last Updated: 2024-09-16T23:36:00.300Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/PR:N/S:U/C:N/AC:L/A:H/I:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Access Problem Types: Denial of Service Description: IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199280
CVE ID: CVE-2021-20577 State: PUBLISHED Published: 2021-05-10T16:20:17.399421Z Last Updated: 2024-09-17T00:16:35.976Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/PR:N/AC:H/AV:A/I:L/C:L/UI:R/A:N/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: Cloud Pak for Security Problem Types: Cross-Site Scripting Description: IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/supp
ssion. IBM X-Force ID: 199281. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6450849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199281
CVE ID: CVE-2021-20578 State: PUBLISHED Published: 2021-09-30T16:20:16.598071Z Last Updated: 2024-09-17T00:31:00.175Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/C:L/AC:L/PR:N/A:N/I:L/AV:A/S:U/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Cloud Pak for Security Problem Types: Gain Access Description: IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6493729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199282
CVE ID: CVE-2021-20579 State: PUBLISHED Published: 2021-06-24T18:45:27.721579Z Last Updated: 2024-09-16T20:51:50.232Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/PR:N/AC:H/S:U/C:H/UI:N/A:N/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL function to obtain sensitive information when AUTO_REVAL is set to DEFFERED_FORCE. IBM X-Force ID: 199283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466369 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6466369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199283 - https://security.netapp.com/advisory/ntap-20210720-0006/
CVE ID: CVE-2021-20580 State: PUBLISHED Published: 2021-06-29T15:50:22.337643Z Last Updated: 2024-09-17T03:58:55.397Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/S:U/AC:L/I:L/PR:N/A:N/UI:R/AV:N/C:N/RC:C/E:U/RL:O) Vendors: IBM Products: Planning Analytics Problem Types: Gain Access Description: IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 198241. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6462331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/198241
CVE ID: CVE-2021-20581 State: PUBLISHED Published: 2023-10-17T01:17:54.471Z Last Updated: 2024-09-13T20:15:58.984Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-613 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199324
CVE ID: CVE-2021-20582 State: PUBLISHED Published: 2021-09-14T13:25:26.238096Z Last Updated: 2024-09-17T01:02:08.897Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/UI:N/AC:H/C:L/I:N/PR:N/AV:N/S:U/E:U/RL:O/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 199328. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6488459 - https://exchange.xforce.ibmcloud.com/vul
ogram Container: References: - https://www.ibm.com/support/pages/node/6488459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199328
CVE ID: CVE-2021-20583 State: PUBLISHED Published: 2021-06-25T17:40:27.125720Z Last Updated: 2024-09-16T22:20:34.227Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/AV:N/A:N/PR:H/AC:L/C:H/S:C/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Privilege Vault Problem Types: Obtain Information Description: IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP GET request by a privileged user due to improper input validation.. IBM X-Force ID: 199396. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199396
CVE ID: CVE-2021-20584 State: PUBLISHED Published: 2021-10-07T18:05:58.643883Z Last Updated: 2024-09-17T01:05:39.459Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/I:H/S:U/C:N/A:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Gain Access Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199397
CVE ID: CVE-2021-20585 State: PUBLISHED Published: 2021-05-31T14:50:18.138778Z Last Updated: 2024-09-17T00:15:52.591Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/S:U/C:L/PR:N/AV:N/AC:L/I:N/A:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Access Problem Types: Obtain Information Description: IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system. IBM X-Force ID: 199398. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199398
CVE ID: CVE-2021-20586 State: PUBLISHED Published: 2021-01-29T14:54:32 Last Updated: 2024-08-03T17:45:44.779Z Vendors: n/a Products: Robot Controller MELFA FR Series; Robot Controller CR Series; Cooperative Robot ASSISTA Problem Types: Resource management errors Description: Resource management errors vulnerability in a robot controller of MELFA FR Series(controller "CR800-*V*D" of RV-*FR***-D-* all versions, controller "CR800-*HD" of RH-*FRH***-D-* all versions, controller "CR800-*HRD" of RH-*FRHR***-D-* all versions, controller "CR800-*V*R with R16RTCPU" of RV-*FR***-R-* all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU"
all versions, controller "CR800-*HR with R16RTCPU" of RH-*FRH***-R-* all versions, controller "CR800-*HRR with R16RTCPU" of RH-*FRHR***-R-* all versions, controller "CR800-*V*Q with Q172DSRCPU" of RV-*FR***-Q-* all versions, controller "CR800-*HQ with Q172DSRCPU" of RH-*FRH***-Q-* all versions, controller "CR800-*HRQ with Q172DSRCPU" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller "CR800-CVD" of RV-8CRL-D-* all versions, controller "CR800-CHD" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller "CR800-05VD" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot progra
of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf
CVE ID: CVE-2021-20587 State: PUBLISHED Published: 2021-02-19T19:55:37 Last Updated: 2025-06-12T23:11:17.182Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator, FR Configurator SW3, FR Configurator2, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GT SoftGOT1000 Version3, GT SoftGOT2000 Version1, GX Configurator-DP, GX Configurator-QP, GX Developer, GX Explorer, GX IEC Developer, GX LogViewer, GX RemoteService-I, GX Works2, GX Works3, iQ Monozukuri ANDON (Data Transfer), iQ Monozukuri Process Remote Monitoring
, GX RemoteService-I, GX Works2, GX Works3, iQ Monozukuri ANDON (Data Transfer), iQ Monozukuri Process Remote Monitoring (Data Transfer), M_CommDTM-HART, M_CommDTM-IO-Link, MELFA-Works, MELSEC WinCPU Setting Utility, MELSOFT EM Software Development Kit (EM Configurator), MELSOFT Navigator, MH11 SettingTool Version2, MI Configurator, MT Works2, MX Component, Network Interface Board CC IE Control utility, Network Interface Board CC IE Field Utility, Network Interface Board CC-Link Ver.2 Utility, Network Interface Board MNETH utility, PX Developer, RT ToolBox2, RT ToolBox3, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU), SLMP Data Collector Problem Types: CWE-122 Description
tting/monitoring tools for the C Controller module (SW4PVC-CCPU), SLMP Data Collector Problem Types: CWE-122 Description: Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1
OT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4
rsions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network In
eld Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and return
omputer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf - https://jvn.jp/vu/JVNVU92330101 - https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02
CVE ID: CVE-2021-20588 State: PUBLISHED Published: 2021-02-19T19:58:29.101118Z Last Updated: 2025-06-12T23:23:49.362Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator, FR Configurator SW3, FR Configurator2, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GT SoftGOT1000 Version3, GT SoftGOT2000 Version1, GX Configurator-DP, GX Configurator-QP, GX Developer, GX Explorer, GX IEC Developer, GX LogViewer, GX RemoteService-I, GX Works2, GX Works3, iQ Monozukuri ANDON (Data Transfer), iQ Monozukuri Process Remote Mo
ogViewer, GX RemoteService-I, GX Works2, GX Works3, iQ Monozukuri ANDON (Data Transfer), iQ Monozukuri Process Remote Monitoring (Data Transfer), M_CommDTM-HART, M_CommDTM-IO-Link, MELFA-Works, MELSEC WinCPU Setting Utility, MELSOFT EM Software Development Kit (EM Configurator), MELSOFT Navigator, MH11 SettingTool Version2, MI Configurator, MT Works2, MX Component, Network Interface Board CC IE Control utility, Network Interface Board CC IE Field Utility, Network Interface Board CC-Link Ver.2 Utility, Network Interface Board MNETH utility, PX Developer, RT ToolBox2, RT ToolBox3, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU), SLMP Data Collector Problem Types: CWE-130 Des
Box3, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU), SLMP Data Collector Problem Types: CWE-130 Description: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, G
nd prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D
ote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility ver
Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing
malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf - https://jvn.jp/vu/JVNVU92330101 - https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02
CVE ID: CVE-2021-20589 State: PUBLISHED Published: 2021-05-19T10:28:23 Last Updated: 2024-08-03T17:45:44.455Z Vendors: n/a Products: GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension Controller Problem Types: Buffer access with incorrect length value Description: Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model communication driver versions 01.21.000 through 01.39.000, GOT SIMPLE series GS21 model communication driver versions 01.21.000 t
tion driver versions 01.21.000 through 01.39.000, GOT SIMPLE series GS21 model communication driver versions 01.21.000 through 01.39.000, GT SoftGOT2000 versions 1.170C through 1.250L and Tension Controller LE7-40GU-L Screen package data for MODBUS/TCP V1.00 allows a remote unauthenticated attacker to stop the communication function of the products via specially crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-002_en.pdf - https://jvn.jp/vu/JVNVU99895108/index.html
CVE ID: CVE-2021-20590 State: PUBLISHED Published: 2021-04-22T18:54:28 Last Updated: 2024-08-03T17:45:44.626Z Vendors: n/a Products: GOT2000 series GT27 model, GOT2000 series GT25 model, GOT2000 series GT21 model GT2107-WTBD, GOT2000 series GT21 model GT2107-WTSD, GOT SIMPLE series GS21 model GS2110-WTBD-N, GOT SIMPLE series GS21 model GS2107-WTBD-N Problem Types: Improper authentication Description: Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC
OT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the "VNC server" function is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf - https://jvn.jp/vu/JVNVU97615777/index.html
CVE ID: CVE-2021-20591 State: PUBLISHED Published: 2021-06-11T15:52:45 Last Updated: 2024-08-03T17:45:44.388Z Vendors: n/a Products: MELSEC iQ-R series CPU modules Problem Types: Uncontrolled Resource Consumption Description: Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (D
to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-003_en.pdf - https://jvn.jp/vu/JVNVU98060539/index.html