Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-29946 State: PUBLISHED Published: 2024-03-27T16:15:59.872Z Last Updated: 2025-02-28T11:03:53.749Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Splunk Products: Splunk Enterprise, Splunk Cloud Platform Problem Types: CWE-20 Description: In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into initiating a request within their browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
to initiating a request within their browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0302 - https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/
CVE ID: CVE-2024-29947 State: PUBLISHED Published: 2024-04-02T11:06:42.898Z Last Updated: 2024-10-31T15:01:23.386Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Hikvision Products: DS-7604NI-K1 / 4P(B) Description: There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected product, causing a process abnormality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices/
CVE ID: CVE-2024-29948 State: PUBLISHED Published: 2024-04-02T11:07:04.983Z Last Updated: 2024-11-06T21:00:14.957Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L) Vendors: Hikvision Products: DS-7604NXI-K1/4P Description: There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulnerability by sending specially crafted messages to a vulnerable device, causing a service abnormality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices/
CVE ID: CVE-2024-29949 State: PUBLISHED Published: 2024-04-02T11:07:41.449Z Last Updated: 2024-08-27T14:53:55.067Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hikvision Products: DS-7604NI-K1 / 4P(B), DS-76xxNI-Mx, DS-77xxNI-Mx, DS-96xxxNI-Mxx, DS-76xxNXI-Ix, DS-77xxNXI-Ix, DS-86xxNXI-Ix, DS-96xxNXI-Ix, iDS-76xxNXI-Mx, iDS-77xxNXI-Mx, iDS-96xxxMXI-Mxx, DS-7604NI-M1/4P Description: There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hikvision.com/
ds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices/
CVE ID: CVE-2024-29950 State: PUBLISHED Published: 2024-04-17T18:21:35.720Z Last Updated: 2024-08-02T01:17:58.630Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-326 Description: The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23236
CVE ID: CVE-2024-29951 State: PUBLISHED Published: 2024-04-17T19:21:32.090Z Last Updated: 2024-08-02T01:17:58.619Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-326 Description: Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23237
CVE ID: CVE-2024-29952 State: PUBLISHED Published: 2024-04-17T21:43:57.482Z Last Updated: 2024-08-02T01:17:58.546Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-312 Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23238
CVE ID: CVE-2024-29953 State: PUBLISHED Published: 2024-06-25T23:16:48.169Z Last Updated: 2024-08-22T18:03:11.060Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Brocade Products: Fabric OS Problem Types: CWE-922 Description: A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/S
Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23227
CVE ID: CVE-2024-29954 State: PUBLISHED Published: 2024-06-25T23:42:50.227Z Last Updated: 2024-08-22T18:03:11.996Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Brocade Products: Fabric OS Problem Types: CWE-312 Description: A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp and sftp. Detail. When the firmwaredownload command is incorrectly entered or points to an erroneous file, the firmware download log captures the failed command, including any passwo
ctly entered or points to an erroneous file, the firmware download log captures the failed command, including any password entered in the command line. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23226
CVE ID: CVE-2024-29955 State: PUBLISHED Published: 2024-04-17T22:11:51.261Z Last Updated: 2024-08-02T01:17:58.612Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-532 Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23239
CVE ID: CVE-2024-29956 State: PUBLISHED Published: 2024-04-18T01:00:49.444Z Last Updated: 2024-08-02T01:17:58.555Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-312 Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23240
CVE ID: CVE-2024-29957 State: PUBLISHED Published: 2024-04-19T03:11:25.892Z Last Updated: 2024-08-02T01:17:58.659Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-532 Description: When Brocade SANnav before v2.3.1 and v2.3.0a servers are configured in Disaster Recovery mode, the encryption key is stored in the DR log files. This could provide attackers with an additional, less-protected path to acquiring the encryption key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23241
CVE ID: CVE-2024-29958 State: PUBLISHED Published: 2024-04-19T03:15:32.394Z Last Updated: 2024-08-02T01:17:58.622Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-532 Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/conte
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23242
CVE ID: CVE-2024-29959 State: PUBLISHED Published: 2024-04-19T03:19:28.271Z Last Updated: 2024-08-02T01:17:58.492Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-532 Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23243
CVE ID: CVE-2024-29960 State: PUBLISHED Published: 2024-04-19T03:30:51.466Z Last Updated: 2024-08-02T01:17:58.593Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-798 Description: In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnnav VM based on the official OVA images is vulnerable to MITM over SSH. An attacker can decrypt and compromise the SSH traffic to the SANnav. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23244
CVE ID: CVE-2024-29961 State: PUBLISHED Published: 2024-04-19T03:59:25.379Z Last Updated: 2024-08-02T01:17:58.481Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-200 Description: A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the behavior and launch a supply-chain attack against a Brocade SANnav appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
a supply-chain attack against a Brocade SANnav appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23246
CVE ID: CVE-2024-29962 State: PUBLISHED Published: 2024-04-19T04:15:43.213Z Last Updated: 2024-08-02T01:17:58.555Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-276 Description: Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without the required privileges to access sensitive information or a Java binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23248
CVE ID: CVE-2024-29963 State: PUBLISHED Published: 2024-04-19T04:04:48.344Z Last Updated: 2024-08-02T01:17:58.554Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-798 Description: Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23247
CVE ID: CVE-2024-29964 State: PUBLISHED Published: 2024-04-19T04:39:17.273Z Last Updated: 2024-09-18T22:30:38.120Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-732 Description: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23249
CVE ID: CVE-2024-29965 State: PUBLISHED Published: 2024-04-19T04:48:46.279Z Last Updated: 2024-08-02T01:17:58.599Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-922 Description: In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broa
switches. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23250
CVE ID: CVE-2024-29966 State: PUBLISHED Published: 2024-04-19T04:53:59.021Z Last Updated: 2024-08-02T01:17:58.656Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-798 Description: Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23255
CVE ID: CVE-2024-29967 State: PUBLISHED Published: 2024-04-19T05:06:45.286Z Last Updated: 2024-08-02T01:17:58.699Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-276 Description: In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing reading and writing access to sensitive files. The vulnerability could allow a sudo privileged user on the host OS to read and write access to these files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/exte
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23254
CVE ID: CVE-2024-29968 State: PUBLISHED Published: 2024-04-19T05:17:57.502Z Last Updated: 2024-09-18T22:32:12.764Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-922 Description: An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:/
ture and its contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23253
CVE ID: CVE-2024-29969 State: PUBLISHED Published: 2024-04-19T05:24:44.930Z Last Updated: 2024-08-02T01:17:58.693Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Brocade Products: Brocade SANnav Problem Types: CWE-326 Description: When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak message authentication code ciphers are added by default for port 18082. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23251
CVE ID: CVE-2024-29970 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T14:49:38.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.fortanix.com/hc/en-us/sections/360012461751-Enclave-OS - https://github.com/ahoi-attacks/sigy/blob/main/pocs/enclaveos/cve.md
CVE ID: CVE-2024-29971 State: PUBLISHED Published: 2025-01-10T00:00:00 Last Updated: 2025-01-14T14:45:05.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://scontain.com - https://github.com/ahoi-attacks/sigy/blob/main/pocs/scone/cve.md
CVE ID: CVE-2024-29972 State: PUBLISHED Published: 2024-06-04T01:24:58.172Z Last Updated: 2024-08-02T01:17:58.671Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NAS326 firmware, NAS542 firmware Problem Types: CWE-78 Description: ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
mands by sending a crafted HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024 - https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/
CVE ID: CVE-2024-29973 State: PUBLISHED Published: 2024-06-04T01:29:41.852Z Last Updated: 2024-08-02T01:17:58.484Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NAS326 firmware, NAS542 firmware Problem Types: CWE-78 Description: ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
sending a crafted HTTP POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024 - https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/
CVE ID: CVE-2024-29974 State: PUBLISHED Published: 2024-06-04T01:34:11.340Z Last Updated: 2024-08-02T01:17:58.668Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NAS326 firmware, NAS542 firmware Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code by uploading a crafted configuration file to a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
ng a crafted configuration file to a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024 - https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/
CVE ID: CVE-2024-29975 State: PUBLISHED Published: 2024-06-04T01:43:06.403Z Last Updated: 2024-08-02T01:17:58.589Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NAS326 firmware, NAS542 firmware Problem Types: CWE-269 Description: ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichmen
execute some system commands as the “root” user on a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024 - https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/
CVE ID: CVE-2024-29976 State: PUBLISHED Published: 2024-06-04T01:47:09.211Z Last Updated: 2024-08-02T01:17:58.558Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: NAS326 firmware, NAS542 firmware Problem Types: CWE-269 Description: ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated attacker to obtain a logged-in administrator’s session information containing cookies on an affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
’s session information containing cookies on an affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024 - https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/