Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13529 State: PUBLISHED Published: 2019-10-09T15:26:53 Last Updated: 2024-08-04T23:57:39.443Z Vendors: SMA Solar Technology AG Products: Sunny WebBox Problem Types: CWE-352 Description: An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-281-01 - http://packetstormsecurity.com/files/1547
ntainer: References: - https://www.us-cert.gov/ics/advisories/icsa-19-281-01 - http://packetstormsecurity.com/files/154789/SMA-Solar-Technology-AG-Sunny-WebBox-1.6-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-13530 State: PUBLISHED Published: 2019-09-12T19:05:08 Last Updated: 2024-08-04T23:57:39.229Z Vendors: n/a Products: Philips IntelliVue WLAN, portable patient monitors Problem Types: CWE-259 Description: Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C) and WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C). An attacker can use these credentials to login via ftp and upload a malicious firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ic
ous firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-255-01
CVE ID: CVE-2019-13531 State: PUBLISHED Published: 2019-11-08T19:46:45 Last Updated: 2025-05-22T18:37:04.526Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: Medtronic Products: Valleylab FT10 Energy Platform (VLFT10GEN), Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) Problem Types: CWE-287 Description: In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be
lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be bypassed, allowing for inauthentic instruments to connect to the generator. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-01
CVE ID: CVE-2019-13532 State: PUBLISHED Published: 2019-09-13T16:58:21 Last Updated: 2024-08-04T23:57:39.525Z Vendors: n/a Products: CODESYS V3 web server Problem Types: CWE-22 Description: CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-01
CVE ID: CVE-2019-13533 State: PUBLISHED Published: 2019-12-16T19:25:00 Last Updated: 2024-08-04T23:57:39.436Z Vendors: n/a Products: Omron PLC CJ and CS Series Problem Types: CWE-294 Description: In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-346-02
CVE ID: CVE-2019-13534 State: PUBLISHED Published: 2019-09-12T19:02:57 Last Updated: 2024-08-04T23:57:39.350Z Vendors: n/a Products: Philips IntelliVue WLAN, portable patient monitors Problem Types: CWE-494 Description: Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C) and WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C). The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code. Additional Analyst Notes: - C
and executes the code without sufficiently verifying the origin and integrity of the code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-255-01
CVE ID: CVE-2019-13535 State: PUBLISHED Published: 2019-11-08T19:45:55 Last Updated: 2025-05-22T18:39:28.797Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Medtronic Products: Valleylab FT10 Energy Platform (VLFT10GEN), Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) Problem Types: CWE-693 Description: In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security me
lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-01
CVE ID: CVE-2019-13536 State: PUBLISHED Published: 2019-09-11T20:49:37 Last Updated: 2024-08-04T23:57:39.342Z Vendors: Delta Electronics Products: TPEditor Problem Types: CWE-122 Description: Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-253-01
CVE ID: CVE-2019-13537 State: PUBLISHED Published: 2020-01-14T18:05:51 Last Updated: 2024-08-04T23:57:39.424Z Vendors: AVEVA Products: Vijeo Citect and Citect SCADA Problem Types: CWE-121 Description: The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-290-01 - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf
CVE ID: CVE-2019-13538 State: PUBLISHED Published: 2019-09-17T19:04:54 Last Updated: 2024-08-04T23:57:39.147Z Vendors: n/a Products: n/a Problem Types: CWE-79 Description: 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-02 - https://c
Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-02 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102f
CVE ID: CVE-2019-13539 State: PUBLISHED Published: 2019-11-08T19:07:59 Last Updated: 2025-05-22T19:06:39.644Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Medtronic Products: Valleylab Exchange Client, Valleylab FT10 Energy Platform (VLFT10GEN), Valleylab FX8 Energy Platform (VLFX8GEN) Problem Types: CWE-328 Description: Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use th
scrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02 - https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html
CVE ID: CVE-2019-13540 State: PUBLISHED Published: 2019-09-11T20:52:28 Last Updated: 2024-08-04T23:57:39.273Z Vendors: Delta Electronics Products: TPEditor Problem Types: CWE-121 Description: Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-253-01
CVE ID: CVE-2019-13541 State: PUBLISHED Published: 2019-10-18T18:26:35 Last Updated: 2024-08-04T23:57:39.273Z Vendors: n/a Products: Horner Automation Cscape Problem Types: CWE-20 Description: In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-902/ - https://www.us-cert.gov/ics/advisories/icsa-19-290-02
CVE ID: CVE-2019-13542 State: PUBLISHED Published: 2019-09-17T18:56:45 Last Updated: 2024-08-04T23:57:39.459Z Vendors: GmbH Products: 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server Problem Types: CWE-476 Description: 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-04
CVE ID: CVE-2019-13543 State: PUBLISHED Published: 2019-11-08T19:03:51 Last Updated: 2025-05-22T19:03:49.976Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Medtronic Products: Valleylab Exchange Client, Valleylab FT10 Energy Platform (VLFT10GEN), Valleylab FX8 Energy Platform (VLFX8GEN) Problem Types: CWE-798 Description: Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device. Additional Analyst N
ltiple sets of hard-coded credentials. If discovered, they can be used to read files on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02 - https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html
CVE ID: CVE-2019-13544 State: PUBLISHED Published: 2019-09-11T20:45:39 Last Updated: 2024-08-04T23:57:39.410Z Vendors: Delta Electronics Products: TPEditor Problem Types: CWE-787 Description: Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-253-01
CVE ID: CVE-2019-13545 State: PUBLISHED Published: 2019-10-18T18:23:31 Last Updated: 2024-08-04T23:57:39.397Z Vendors: n/a Products: Horner Automation Cscape Problem Types: CWE-787 Description: In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-903/ - https://www.us-cert.gov/ics/advisories/icsa-19-290-02
CVE ID: CVE-2019-13546 State: PUBLISHED Published: 2019-10-25T17:54:57 Last Updated: 2024-08-04T23:57:39.429Z Vendors: n/a Products: IntelliSpace Perinatal Problem Types: CWE-668 Description: In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked application screen, or an authorized remote desktop session host application user to break-out from the containment of the application and access unauthorized resources from the Windows operating system as the limited-access Windows user. Due to potential Windows vulnerabilities, it may be possible for additional
g system as the limited-access Windows user. Due to potential Windows vulnerabilities, it may be possible for additional attack methods to be used to escalate privileges on the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-297-01
CVE ID: CVE-2019-13547 State: PUBLISHED Published: 2019-10-31T20:59:00 Last Updated: 2024-08-04T23:57:39.388Z Vendors: n/a Products: Advantech WISE-PaaS/RMM Problem Types: CWE-862 Description: Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-960/
CVE ID: CVE-2019-13548 State: PUBLISHED Published: 2019-09-13T16:58:29 Last Updated: 2024-08-04T23:57:39.467Z Vendors: n/a Products: CODESYS V3 web server Problem Types: CWE-121 Description: CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-01
CVE ID: CVE-2019-13549 State: PUBLISHED Published: 2019-10-25T17:43:09 Last Updated: 2024-08-04T23:57:39.519Z Vendors: n/a Products: Rittal Chiller SK 3232-Series Problem Types: CWE-306 Description: Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on and off and setting the temperature set point, can be modified without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-297-01
Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-297-01 - http://seclists.org/fulldisclosure/2019/Oct/46
CVE ID: CVE-2019-13550 State: PUBLISHED Published: 2019-09-18T20:52:05 Last Updated: 2024-08-04T23:57:39.475Z Vendors: n/a Products: WebAccess Problem Types: CWE-285 Description: In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE ID: CVE-2019-13551 State: PUBLISHED Published: 2019-10-31T20:54:45 Last Updated: 2024-08-04T23:57:39.367Z Vendors: n/a Products: Advantech WISE-PaaS/RMM Problem Types: CWE-22 Description: Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-935/ - https://www.zerodayinitiative.com/adviso
ies/icsa-19-304-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-935/ - https://www.zerodayinitiative.com/advisories/ZDI-19-950/ - https://www.zerodayinitiative.com/advisories/ZDI-19-941/ - https://www.zerodayinitiative.com/advisories/ZDI-19-958/
CVE ID: CVE-2019-13552 State: PUBLISHED Published: 2019-09-18T21:00:12 Last Updated: 2024-08-04T23:57:39.182Z Vendors: n/a Products: WebAccess Problem Types: CWE-77 Description: In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file deletion and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE ID: CVE-2019-13553 State: PUBLISHED Published: 2019-10-25T17:46:47 Last Updated: 2024-08-04T23:57:39.466Z Vendors: n/a Products: Rittal Chiller SK 3232-Series Problem Types: CWE-798 Description: Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-297-01 - http://
al Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-297-01 - http://seclists.org/fulldisclosure/2019/Oct/45
CVE ID: CVE-2019-13554 State: PUBLISHED Published: 2020-04-07T17:01:44 Last Updated: 2024-08-04T23:57:39.431Z Vendors: n/a Products: GE Mark VIe Controller Problem Types: CWE-285 Description: GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-281-02
CVE ID: CVE-2019-13555 State: PUBLISHED Published: 2019-11-13T22:27:22 Last Updated: 2024-08-04T23:57:39.411Z Vendors: n/a Products: Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior. Problem Types: Denial of Service Description: In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13
vice Description: In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules. Additional Analyst Notes: - CVE Program Container: References: - https://
ts to the FTP server on the above CPU modules. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-311-01
CVE ID: CVE-2019-13556 State: PUBLISHED Published: 2019-09-18T21:05:50 Last Updated: 2024-08-04T23:57:39.443Z Vendors: n/a Products: WebAccess Problem Types: CWE-121 Description: In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE ID: CVE-2019-13557 State: PUBLISHED Published: 2019-11-08T17:26:53 Last Updated: 2024-08-04T23:57:39.417Z Vendors: n/a Products: Tasy EMR Problem Types: CWE-200 Description: In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01
CVE ID: CVE-2019-13558 State: PUBLISHED Published: 2019-09-18T21:14:18 Last Updated: 2024-08-04T23:57:39.463Z Vendors: n/a Products: WebAccess Problem Types: CWE-94 Description: In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data exfiltration, or cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE ID: CVE-2019-13559 State: PUBLISHED Published: 2020-04-07T17:03:47 Last Updated: 2024-08-04T23:57:39.447Z Vendors: n/a Products: GE Mark VIe Controller Problem Types: CWE-798 Description: GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go into applications requiring the GE commissioning engineer to change default configurations during the installation process. GE recommends that users reset controller passwords during installation in the operating e
ing the installation process. GE recommends that users reset controller passwords during installation in the operating environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-281-02
CVE ID: CVE-2019-13560 State: PUBLISHED Published: 2019-07-11T14:59:02 Last Updated: 2024-08-04T23:57:39.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf - https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/setupwizard.txt