Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0655 State: PUBLISHED Published: 2013-01-21T16:00:00Z Last Updated: 2024-09-17T00:51:21.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/download/ww/en/details/29960967-SE-Software-Update-Utility-Vulnerability-Disclosure/?reference=SEVD-2013-009-01 - http://www2.schneider-electric.com/corporat
ftware-Update-Utility-Vulnerability-Disclosure/?reference=SEVD-2013-009-01 - http://www2.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2013/01/20130109_advisory_of_vulnerability_affecting_schneider_electric_s_software_upda.xml - http://www.us-cert.gov/control_systems/pdf/ICSA-13-016-01.pdf
CVE ID: CVE-2013-0656 State: PUBLISHED Published: 2013-01-21T21:00:00Z Last Updated: 2024-09-17T01:30:31.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-099741.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-13-014-01.pdf
CVE ID: CVE-2013-0657 State: PUBLISHED Published: 2013-01-21T16:00:00 Last Updated: 2024-08-06T14:33:05.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf - https://www.exploit-db.com/exploits/45218/ - http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip - http://igss.schneider-electric.com/igss/igssupdates/v
schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip - http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip
CVE ID: CVE-2013-0658 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-17T03:48:46.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-043-01.pdf
CVE ID: CVE-2013-0659 State: PUBLISHED Published: 2013-03-29T19:00:00Z Last Updated: 2024-09-17T01:30:54.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-628113.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-084-01.pdf
CVE ID: CVE-2013-0662 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T14:33:05.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01 - https://www.exploit-db.com/exploits/45219/ - http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 - http://www.securityfocus.com/bid/66500 - https://www.exploit-db.
http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 - http://www.securityfocus.com/bid/66500 - https://www.exploit-db.com/exploits/45220/
CVE ID: CVE-2013-0663 State: PUBLISHED Published: 2013-04-04T10:00:00 Last Updated: 2024-08-06T14:33:05.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44678/ - http://www.schneider-electric.com
s: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44678/ - http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/ - http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper - http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
CVE ID: CVE-2013-0664 State: PUBLISHED Published: 2013-04-04T10:00:00Z Last Updated: 2024-09-16T19:30:03.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/ - http://www.schneider-electric.com/download/ww/e
etails/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/ - http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper - http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
CVE ID: CVE-2013-0665 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-17T00:36:55.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-01.pdf
CVE ID: CVE-2013-0666 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T20:43:02.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service (unhandled exception and application crash) via a TCP RST packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-106-01
CVE ID: CVE-2013-0667 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T19:35:31.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0668 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T17:43:37.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0669 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T23:46:19.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0670 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T18:34:43.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0671 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T22:19:41.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0672 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-16T22:20:36.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2013-0673 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T19:41:59.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-106-01
CVE ID: CVE-2013-0674 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-16T19:47:06.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0675 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-16T19:36:20.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0676 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-16T16:32:26.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0677 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-16T23:10:58.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0678 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-17T00:01:41.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0679 State: PUBLISHED Published: 2013-03-21T15:00:00Z Last Updated: 2024-09-16T16:12:24.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf
CVE ID: CVE-2013-0680 State: PUBLISHED Published: 2013-04-05T21:00:00Z Last Updated: 2024-09-16T21:58:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-01.pdf
CVE ID: CVE-2013-0681 State: PUBLISHED Published: 2013-04-05T21:00:00Z Last Updated: 2024-09-16T23:45:32.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed data in a formatted text command. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-01.pdf
CVE ID: CVE-2013-0682 State: PUBLISHED Published: 2013-04-05T21:00:00Z Last Updated: 2024-09-16T23:42:06.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via malformed data in a formatted text command, leading to out-of-bounds access to (1) heap or (2) stack memory. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-0
k memory. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-01.pdf
CVE ID: CVE-2013-0683 State: PUBLISHED Published: 2013-04-05T21:00:00Z Last Updated: 2024-09-16T23:36:56.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service (incorrect pointer access and client crash) via malformed data in a formatted text command. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-095-01.pdf
CVE ID: CVE-2013-0684 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T02:01:11.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01
CVE ID: CVE-2013-0685 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T03:48:48.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01
CVE ID: CVE-2013-0686 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T18:48:52.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01
CVE ID: CVE-2013-0687 State: PUBLISHED Published: 2013-04-18T01:00:00Z Last Updated: 2024-09-16T18:12:50.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-100-01.pdf - http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Stud
-100-01.pdf - http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf
CVE ID: CVE-2013-0688 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T17:28:12.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01
CVE ID: CVE-2013-0689 State: PUBLISHED Published: 2013-10-03T10:00:00Z Last Updated: 2024-09-16T22:41:37.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE ID: CVE-2013-0690 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-0691 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-0692 State: PUBLISHED Published: 2013-10-03T10:00:00Z Last Updated: 2024-09-16T19:45:39.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE ID: CVE-2013-0693 State: PUBLISHED Published: 2013-10-03T10:00:00Z Last Updated: 2024-09-16T19:04:57.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive information about device presence by listening for broadcast traffic. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE ID: CVE-2013-0694 State: PUBLISHED Published: 2013-10-03T10:00:00Z Last Updated: 2024-09-16T18:04:15.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE ID: CVE-2013-0695 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-0696 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-0697 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-0698 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.