Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37513 State: PUBLISHED Published: 2023-08-11T00:25:14.669Z Last Updated: 2024-10-04T13:06:09.341Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Traveler To Do Description: When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106692
CVE ID: CVE-2023-37516 State: PUBLISHED Published: 2025-04-24T20:37:20.565Z Last Updated: 2025-04-25T19:36:55.468Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-524 Description: Missing "no cache" headers in HCL Leap permits user directory information to be cached. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2023-37517 State: PUBLISHED Published: 2025-04-30T21:11:44.164Z Last Updated: 2025-05-01T15:34:50.518Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Domino Leap Problem Types: CWE-524 Description: Missing "no cache" headers in HCL Leap permits sensitive data to be cached. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
CVE ID: CVE-2023-37518 State: PUBLISHED Published: 2024-01-30T15:30:50.913Z Last Updated: 2025-05-29T15:05:17.860Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix ServiceNow Data Flow Description: HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute within the context of the running user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110202
CVE ID: CVE-2023-37519 State: PUBLISHED Published: 2023-12-21T21:44:20.069Z Last Updated: 2025-04-23T16:21:10.652Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: HCL BigFix Platform Description: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109376
CVE ID: CVE-2023-37520 State: PUBLISHED Published: 2023-12-21T22:13:47.339Z Last Updated: 2024-08-02T17:16:30.415Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: HCL BigFix Platform Description: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109376
CVE ID: CVE-2023-37521 State: PUBLISHED Published: 2024-01-16T15:55:27.149Z Last Updated: 2024-10-29T19:21:35.441Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL BigFix OSD Bare Metal Server WebUI Description: HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE ID: CVE-2023-37522 State: PUBLISHED Published: 2024-01-16T15:59:35.415Z Last Updated: 2025-06-16T19:54:19.639Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL BigFix OSD Bare Metal Server WebUI Description: HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE ID: CVE-2023-37523 State: PUBLISHED Published: 2024-01-16T17:33:01.755Z Last Updated: 2025-06-03T19:00:18.411Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL BigFix OSD Bare Metal Server WebUI Description: Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE ID: CVE-2023-37526 State: PUBLISHED Published: 2024-05-10T17:16:12.752Z Last Updated: 2024-08-02T17:16:30.442Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: DRYiCE Lucy Description: HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS misconfiguration which could potentially allow unauthorized access to the application resources from any web domain and enable cache poisoning attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113032
CVE ID: CVE-2023-37527 State: PUBLISHED Published: 2024-02-02T18:10:04.303Z Last Updated: 2025-06-03T18:58:07.501Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2023-37528 State: PUBLISHED Published: 2024-02-03T05:27:07.117Z Last Updated: 2025-06-03T19:00:40.519Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2023-37529 State: PUBLISHED Published: 2024-02-02T19:45:10.048Z Last Updated: 2025-06-03T18:59:06.988Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2023-37530 State: PUBLISHED Published: 2024-02-02T20:02:24.389Z Last Updated: 2025-06-03T18:58:45.817Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2023-37531 State: PUBLISHED Published: 2024-02-02T20:07:44.872Z Last Updated: 2025-06-03T18:59:31.448Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Platform Description: A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209
CVE ID: CVE-2023-37532 State: PUBLISHED Published: 2023-10-23T16:34:28.313Z Last Updated: 2024-09-17T13:44:52.795Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Commerce Description: HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108094
CVE ID: CVE-2023-37533 State: PUBLISHED Published: 2023-11-08T23:17:18.712Z Last Updated: 2024-09-03T19:06:34.349Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Connections Description: HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which contains the malicious script code. This may allow the attacker to steal cookie-based authentication credentials and comprise a user's account then launch other attacks. Additional Analyst Notes: - CVE Program Container: - CI
entials and comprise a user's account then launch other attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108434
CVE ID: CVE-2023-37534 State: PUBLISHED Published: 2025-04-24T16:27:14.488Z Last Updated: 2025-04-24T17:53:15.741Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-79 Description: Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2023-37535 State: PUBLISHED Published: 2025-04-30T21:12:38.618Z Last Updated: 2025-05-01T15:34:42.961Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: HCL Software Products: HCL Domino Leap Problem Types: CWE-79 Description: Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
CVE ID: CVE-2023-37536 State: PUBLISHED Published: 2023-10-11T06:46:01.750Z Last Updated: 2025-02-13T17:01:28.350Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H) Vendors: HCL Software Products: BigFix Platform Description: An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0107791 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAOSSJ72CUJ535VRWTCVQKUYT2LYR3OM/ - https://lists.fedoraprojec
ves/list/package-announce@lists.fedoraproject.org/message/DAOSSJ72CUJ535VRWTCVQKUYT2LYR3OM/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/ - https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html
CVE ID: CVE-2023-37537 State: PUBLISHED Published: 2023-10-17T14:58:28.743Z Last Updated: 2024-09-13T16:25:16.575Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: HCL AppScan Presence Description: An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC), may allow a local attacker to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108018
CVE ID: CVE-2023-37538 State: PUBLISHED Published: 2023-10-11T12:53:10.796Z Last Updated: 2024-09-18T16:02:56.792Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: HCL Software Products: Digital Experience Description: HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108006
CVE ID: CVE-2023-37539 State: PUBLISHED Published: 2024-06-06T22:43:59.255Z Last Updated: 2024-08-02T17:16:30.571Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: Domino Server Description: The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_art
ISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113715
CVE ID: CVE-2023-37540 State: PUBLISHED Published: 2024-02-23T07:00:59.008Z Last Updated: 2024-11-29T15:21:39.809Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Sametime Chat Description: Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109082
CVE ID: CVE-2023-37541 State: PUBLISHED Published: 2024-06-25T15:08:03.168Z Last Updated: 2025-02-25T23:12:11.673Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: HCL Software Products: Connections Description: HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119435
CVE ID: CVE-2023-37543 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:34:46.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a modified local_graph_id parameter to graph_xport.php. This is a different vulnerability than CVE-2019-16723. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-4x82-8w8m-w8hj - https://medium.com/%40hussainfathy99/exciting-news-my-first-cve-discovery-cve-2023-37543-idor-vulnerability-in-cacti-bbb6c386afed
CVE ID: CVE-2023-37544 State: PUBLISHED Published: 2023-12-20T08:34:02.393Z Last Updated: 2025-02-13T17:01:29.212Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Apache Software Foundation Products: Apache Pulsar WebSocket Proxy Problem Types: CWE-287 Description: Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong endpoint without authentication. This issue affects Apache Pulsar WebSocket Proxy: from 2.8.0 through 2.8.*, from 2.9.0 through 2.9.*, from 2.10.0 through 2.10.4, from 2.11.0 through 2.11.1, 3.0.0. The known risks include a denial of service due to the WebSocket Proxy accepting any c
rom 2.11.0 through 2.11.1, 3.0.0. The known risks include a denial of service due to the WebSocket Proxy accepting any connections, and excessive data transfer due to misuse of the WebSocket ping/pong feature. 2.10 Pulsar WebSocket Proxy users should upgrade to at least 2.10.5. 2.11 Pulsar WebSocket Proxy users should upgrade to at least 2.11.2. 3.0 Pulsar WebSocket Proxy users should upgrade to at least 3.0.1. 3.1 Pulsar WebSocket Proxy users are unaffected. Any users running the Pulsar WebSocket Proxy for 2.8, 2.9, and earlier should upgrade to one of the above patched versions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/od0k9zts1toc9h9
rsions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/od0k9zts1toc9h9snbqq4pjpyx28mv4m - http://www.openwall.com/lists/oss-security/2023/12/20/2
CVE ID: CVE-2023-37545 State: PUBLISHED Published: 2023-08-03T10:59:28.961Z Last Updated: 2024-10-11T18:14:47.934Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37546, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549, CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
VE-2023-37549, CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019
CVE ID: CVE-2023-37546 State: PUBLISHED Published: 2023-08-03T11:00:33.624Z Last Updated: 2024-10-11T18:14:28.818Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
VE-2023-37549 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019
CVE ID: CVE-2023-37547 State: PUBLISHED Published: 2023-08-03T11:01:10.534Z Last Updated: 2024-10-11T18:12:55.550Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
CVE ID: CVE-2023-37548 State: PUBLISHED Published: 2023-08-03T11:02:02.224Z Last Updated: 2024-10-11T18:12:26.294Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37549 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: