Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27419 State: PUBLISHED Published: 2022-05-03T20:20:49.000Z Last Updated: 2025-04-16T16:25:17.246Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: uClibc-ng Products: uClibc-ng Problem Types: CWE-190 Description: uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://downloads.uclibc-ng.
ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://downloads.uclibc-ng.org/releases/
CVE ID: CVE-2021-27420 State: PUBLISHED Published: 2022-03-23T19:46:24.000Z Last Updated: 2025-04-16T16:40:57.091Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: GE Products: UR family Problem Types: CWE-20 Description: GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels. Additional Analyst No
significant as the relay remains effective in all other functionality and communication channels. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27421 State: PUBLISHED Published: 2022-05-03T20:24:23.000Z Last Updated: 2025-04-16T16:24:46.545Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: NXP Products: MCUXpresso SDK Problem Types: CWE-190 Description: NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advis
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://mcuxpresso.nxp.com/en/welcome
CVE ID: CVE-2021-27422 State: PUBLISHED Published: 2022-03-23T19:46:28.000Z Last Updated: 2025-04-16T16:40:19.585Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GE Products: UR family Problem Types: CWE-200 Description: GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27424 State: PUBLISHED Published: 2022-03-23T19:46:25.000Z Last Updated: 2025-04-16T16:40:47.222Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GE Products: UR family Problem Types: CWE-200 Description: GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27425 State: PUBLISHED Published: 2022-05-03T20:21:39.000Z Last Updated: 2025-04-16T16:25:10.282Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Cesanta Software Products: Mongoose-OS Problem Types: CWE-190 Description: Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/cesa
CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/cesanta/mongoose-os
CVE ID: CVE-2021-27426 State: PUBLISHED Published: 2022-03-23T19:46:27.000Z Last Updated: 2025-04-16T16:40:28.743Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GE Products: UR family Problem Types: CWE-453 Description: GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27427 State: PUBLISHED Published: 2022-05-03T20:16:27.000Z Last Updated: 2025-04-16T16:25:40.605Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: RIOT OS Products: RIOT OS Problem Types: CWE-190 Description: RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/RIOT-OS/RIOT
CVE ID: CVE-2021-27428 State: PUBLISHED Published: 2022-03-23T19:46:25.000Z Last Updated: 2025-04-16T16:40:38.417Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GE Products: UR family Problem Types: CWE-434 Description: GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10. Additional Analyst Notes: - CVE Program Cont
akness is assessed, and mitigation is implemented in firmware Version 8.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27429 State: PUBLISHED Published: 2023-11-20T19:00:19.757Z Last Updated: 2024-08-03T20:48:17.195Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Texas Instruments Products: CC32XX, SimpleLink MSP432E4XX, SimpleLink-CC13XX, SimpleLink-CC26XX, SimpleLink-CC32XX Problem Types: CWE-190 Description: Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 - https://www.ti.com/tool/TI-
am Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 - https://www.ti.com/tool/TI-RTOS-MCU
CVE ID: CVE-2021-27430 State: PUBLISHED Published: 2022-03-23T19:46:26.000Z Last Updated: 2025-04-16T17:59:10.113Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GE Products: UR bootloader binary Problem Types: CWE-798 Description: GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02 - https://www.gegridsolutions.com/Passport/Login.aspx
CVE ID: CVE-2021-27431 State: PUBLISHED Published: 2022-05-03T20:23:35.000Z Last Updated: 2025-04-16T16:24:54.231Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ARM Products: CMSIS RTOS2 Problem Types: CWE-190 Description: ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE ID: CVE-2021-27432 State: PUBLISHED Published: 2021-05-20T15:20:01 Last Updated: 2024-08-03T20:48:17.220Z Vendors: n/a Products: OPC Foundation OPC UA .NET Standard and OPC UA .NET Legacy Problem Types: CWE-674 Description: OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-133-03
CVE ID: CVE-2021-27433 State: PUBLISHED Published: 2022-05-03T20:26:51.000Z Last Updated: 2025-04-16T16:24:24.018Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ARM Products: mbed-ualloc memory library Problem Types: CWE-190 Description: ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/ARMmbed/mbed-os/pull
hment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/ARMmbed/mbed-os/pull/14408
CVE ID: CVE-2021-27434 State: PUBLISHED Published: 2021-05-20T13:42:54 Last Updated: 2024-08-03T20:48:17.296Z Vendors: n/a Products: OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 Problem Types: CWE-200 Description: Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-133-04
CVE ID: CVE-2021-27435 State: PUBLISHED Published: 2022-05-03T20:22:45.000Z Last Updated: 2025-04-16T16:25:02.273Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ARM Products: mbed Problem Types: CWE-190 Description: ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 - https://github.com/ARMmbed/mbed-os/pull/14408
CVE ID: CVE-2021-27436 State: PUBLISHED Published: 2021-03-18T21:24:57 Last Updated: 2024-08-03T20:48:17.186Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-79 Description: WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser actions. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-075-01
CVE ID: CVE-2021-27437 State: PUBLISHED Published: 2021-05-07T14:36:54 Last Updated: 2024-08-03T20:48:17.214Z Vendors: n/a Products: WISE-PaaS/RMM Problem Types: CWE-798 Description: The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM (versions prior to 9.0.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-124-01
CVE ID: CVE-2021-27438 State: PUBLISHED Published: 2021-03-25T19:26:04 Last Updated: 2024-08-03T20:48:17.210Z Vendors: n/a Products: Reason DR60 Problem Types: CWE-94 Description: The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03
CVE ID: CVE-2021-27439 State: PUBLISHED Published: 2022-05-03T20:26:05.000Z Last Updated: 2025-04-16T16:24:31.362Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: TencentOS-tiny Products: TencentOS-tiny Problem Types: CWE-190 Description: TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/usc
tion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE ID: CVE-2021-27440 State: PUBLISHED Published: 2021-03-25T19:28:32 Last Updated: 2024-08-03T20:48:17.215Z Vendors: n/a Products: Reason DR60 Problem Types: CWE-259 Description: The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03
CVE ID: CVE-2021-27442 State: PUBLISHED Published: 2022-05-16T17:13:17.743Z Last Updated: 2025-04-16T16:21:32.645Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Weintek Products: cMT-SVR-1xx/2xx, cMT-G01/G02, cMT-G03/G04, cMT3071/cMT3072/cMT3090/cMT3103/cMT3151, cMT-HDM, cMT-FHD, cMT-CTRL01 Problem Types: CWE-79 Description: The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 - https://dl.
ontainer: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 - https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
CVE ID: CVE-2021-27444 State: PUBLISHED Published: 2022-05-16T17:15:15.597Z Last Updated: 2025-04-16T16:21:25.289Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Weintek Products: cMT-SVR-1xx/2xx, cMT-G01/G02, cMT-G03/G04, cMT3071/cMT3072/cMT3090/cMT3103/cMT3151, cMT-HDM, cMT-FHD, cMT-CTRL01 Problem Types: CWE-284 Description: The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
n behalf of a legitimate administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 - https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
CVE ID: CVE-2021-27445 State: PUBLISHED Published: 2021-12-21T17:54:59.843274Z Last Updated: 2024-09-17T00:51:54.879Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Mesa Labs Products: AmegaView Problem Types: CWE-269 Description: Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03
CVE ID: CVE-2021-27446 State: PUBLISHED Published: 2022-05-16T17:15:44.847Z Last Updated: 2025-04-16T16:21:16.549Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Weintek Products: cMT-SVR-1xx/2xx, cMT-G01/G02, cMT-G03/G04, cMT3071/cMT3072/cMT3090/cMT3103/cMT3151, cMT-HDM, cMT-FHD, cMT-CTRL01 Problem Types: CWE-94 Description: The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 - https:/
am Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 - https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
CVE ID: CVE-2021-27447 State: PUBLISHED Published: 2021-12-21T17:55:03 Last Updated: 2024-08-03T20:48:17.185Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Mesa Labs Products: AmegaView Problem Types: CWE-77 Description: Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-147-03
CVE ID: CVE-2021-27448 State: PUBLISHED Published: 2021-03-25T19:35:18 Last Updated: 2024-08-03T20:48:17.236Z Vendors: n/a Products: MU320E Problem Types: CWE-250 Description: A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02
CVE ID: CVE-2021-27449 State: PUBLISHED Published: 2021-12-21T17:55:00.751662Z Last Updated: 2024-09-17T01:51:57.175Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Mesa Labs Products: AmegaView Problem Types: CWE-77 Description: Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03
CVE ID: CVE-2021-27450 State: PUBLISHED Published: 2021-03-25T19:30:27 Last Updated: 2024-08-03T20:48:17.146Z Vendors: n/a Products: MU320E Problem Types: CWE-326 Description: SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E (all firmware versions prior to v04A00.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02
CVE ID: CVE-2021-27451 State: PUBLISHED Published: 2021-12-21T17:55:05.307958Z Last Updated: 2024-09-16T22:03:33.260Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Mesa Labs Products: AmegaView Problem Types: CWE-287 Description: Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03
CVE ID: CVE-2021-27452 State: PUBLISHED Published: 2021-03-25T19:23:55 Last Updated: 2024-08-03T20:48:17.284Z Vendors: n/a Products: MU320E Problem Types: CWE-259 Description: The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware versions prior to v04A00.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02
CVE ID: CVE-2021-27453 State: PUBLISHED Published: 2021-12-21T17:55:02.729988Z Last Updated: 2024-09-17T02:58:08.318Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Mesa Labs Products: AmegaView Problem Types: CWE-288 Description: Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03
CVE ID: CVE-2021-27454 State: PUBLISHED Published: 2021-03-25T19:33:20 Last Updated: 2024-08-03T20:48:17.242Z Vendors: n/a Products: Reason DR60 Problem Types: CWE-250 Description: The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03
CVE ID: CVE-2021-27455 State: PUBLISHED Published: 2021-07-02T10:51:57 Last Updated: 2024-08-03T20:48:17.283Z Vendors: n/a Products: Delta Electronics DOPSoft Problem Types: CWE-125 Description: Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-182-03
CVE ID: CVE-2021-27456 State: PUBLISHED Published: 2022-03-23T19:46:21.000Z Last Updated: 2025-04-16T16:41:17.401Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Philips Products: Gemini 16 Slice, Gemini Dual, Gemini GXL 10 Slice, Gemini GXL 6 Slice, Gemini GXL 16 Slice, GEMINI LXL, Gemini TF Ready, Gemini TF 16 w/ TOF Performance, Gemini TF 64 w/ TOF Performance, Gemini TF Big Bore, TruFlight Select PET/CT Problem Types: CWE-921 Description: Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
oes not have built-in access control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01 - https://www.philips.com/productsecurity