Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27948 State: PUBLISHED Published: 2023-08-14T22:40:50.455Z Last Updated: 2024-10-08T20:48:31.105Z Vendors: Apple Products: macOS Problem Types: Processing an image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-27949 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:01:42.860Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - ht
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27950 State: PUBLISHED Published: 2023-09-06T01:36:29.244Z Last Updated: 2025-02-13T16:45:36.807Z Vendors: Apple Products: macOS Problem Types: Processing an image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670
CVE ID: CVE-2023-27951 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:00:17.326Z Vendors: Apple Products: macOS Problem Types: An archive may be able to bypass Gatekeeper Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27952 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-13T16:45:37.379Z Vendors: Apple Products: macOS Problem Types: An app may bypass Gatekeeper checks Description: A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT214119 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2023-27953 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-11-04T19:15:45.988Z Vendors: Apple Products: macOS Problem Types: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/
nces: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27954 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T14:56:24.330Z Vendors: Apple Products: macOS, Safari, iOS and iPadOS, watchOS, tvOS Problem Types: A website may be able to track sensitive user information Description: The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213671 - ht
ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213671 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27955 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T14:51:41.383Z Vendors: Apple Products: macOS, iOS and iPadOS, tvOS Problem Types: An app may be able to read arbitrary files Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/e
3670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27956 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T14:49:29.100Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.app
Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27957 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T14:45:38.707Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-27958 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-11-04T19:15:47.084Z Vendors: Apple Products: macOS Problem Types: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/
CVE ID: CVE-2023-27959 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:49:24.909Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-27960 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:40:31.598Z Vendors: Apple Products: macOS Problem Types: An app may be able to gain elevated privileges during the installation of GarageBand Description: This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213650
CVE ID: CVE-2023-27961 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:40:31.486Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS Problem Types: Importing a maliciously crafted calendar invitation may exfiltrate user information Description: Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s
te user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27962 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:36:59.709Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27963 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:29:10.470Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supp
ompting the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27964 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T17:04:42.219Z Vendors: Apple Products: AirPods Firmware Update E Problem Types: When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. Description: An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source devi
to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213752
CVE ID: CVE-2023-27965 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:23:03.535Z Vendors: Apple Products: macOS, Studio Display Firmware Update Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213672
CVE ID: CVE-2023-27966 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:39:47.930Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-27967 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:38:15.824Z Vendors: Apple Products: Xcode Problem Types: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213679
CVE ID: CVE-2023-27968 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:21:51.544Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause unexpected system termination or write kernel memory Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-27969 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:20:56.317Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/
iner: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27970 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:16:29.260Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-27971 State: PUBLISHED Published: 2023-04-28T15:55:45.828Z Last Updated: 2025-01-30T20:10:50.154Z Vendors: HP Inc. Products: HP LaserJet Pro Description: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7919962-7920003-16/hpsbpi03839
CVE ID: CVE-2023-27972 State: PUBLISHED Published: 2023-04-28T15:59:04.584Z Last Updated: 2025-01-30T19:32:18.909Z Vendors: HP Inc. Products: HP LaserJet Pro Description: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840
CVE ID: CVE-2023-27973 State: PUBLISHED Published: 2023-04-28T16:00:55.312Z Last Updated: 2025-01-30T19:08:03.897Z Vendors: HP Inc. Products: HP LaserJet Pro Description: Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7920137-7920161-16/hpsbpi03841
CVE ID: CVE-2023-27974 State: PUBLISHED Published: 2023-03-08T00:00:00 Last Updated: 2024-08-02T12:23:30.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bitwarden/clients/releases - https://flashpoint.io/blog/bitwarden-password-pilfering/ - https://news.ycombinator.com/item?id=35075861
CVE ID: CVE-2023-27975 State: PUBLISHED Published: 2024-02-14T16:55:41.495Z Last Updated: 2024-08-02T12:23:30.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Schneider Electric Products: EcoStruxure Control Expert, EcoStruxure Process Expert Problem Types: CWE-522 Description: CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-0
Vulnrichment: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-044-01.pdf
CVE ID: CVE-2023-27976 State: PUBLISHED Published: 2023-04-18T16:39:35.385Z Last Updated: 2025-02-05T21:02:29.013Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure Control Expert Problem Types: CWE-668 Description: A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&
tainer: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf
CVE ID: CVE-2023-27977 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-05T20:06:06.896Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Schneider Electric Products: IGSS Data Server(IGSSdataServer.exe), IGSS Dashboard (DashBoard.exe), Custom Reports (RMS16.dll) Problem Types: CWE-345 Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)
ker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE ID: CVE-2023-27978 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-05T20:05:58.929Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: IGSS Data Server(IGSSdataServer.exe), IGSS Dashboard (DashBoard.exe), Custom Reports (RMS16.dll) Problem Types: CWE-502 Description: A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Da
user to open a malicious file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE ID: CVE-2023-27979 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-05T20:05:51.982Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Schneider Electric Products: IGSS Data Server(IGSSdataServer.exe), IGSS Dashboard (DashBoard.exe), Custom Reports (RMS16.dll) Problem Types: CWE-345 Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.
ttacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf