Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2756 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T15:44:33.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging knowledge of the source code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83781 - http://support.citrix.com/article/CTX135815 - http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300%40stratosec.co%3E - http://osvdb.org/92748
-archives.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300%40stratosec.co%3E - http://osvdb.org/92748 - http://www.securityfocus.com/bid/59463 - http://www.securitytracker.com/id/1028473 - http://secunia.com/advisories/53204 - http://secunia.com/advisories/53175
CVE ID: CVE-2013-2757 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T15:44:33.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92746 - http://support.citrix.com/article/CTX135815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83783 - http://www.securitytracker.com/id/1028473 - http://secunia.com/advisories/53204 - http://www.securityfocus
ities/83783 - http://www.securitytracker.com/id/1028473 - http://secunia.com/advisories/53204 - http://www.securityfocus.com/bid/59467
CVE ID: CVE-2013-2758 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T15:44:33.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier for remote attackers to guess the console access URL via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92749 - http://support.citrix.com/article/CTX135815 - http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300%40stratosec.co%3E - http://www.securitytracker.com
es.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300%40stratosec.co%3E - http://www.securitytracker.com/id/1028473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83782 - http://secunia.com/advisories/53204 - http://www.securityfocus.com/bid/59464 - http://secunia.com/advisories/53175
CVE ID: CVE-2013-2760 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-16T22:02:13.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24930/ - http://www.osvdb.org/92040
CVE ID: CVE-2013-2761 State: PUBLISHED Published: 2013-04-04T10:00:00Z Last Updated: 2024-09-16T17:38:10.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZilla FTP client. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/ - http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-
.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper
CVE ID: CVE-2013-2762 State: PUBLISHED Published: 2013-04-04T10:00:00Z Last Updated: 2024-09-17T00:20:31.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
CVE ID: CVE-2013-2763 State: PUBLISHED Published: 2013-04-04T10:00:00Z Last Updated: 2024-09-17T03:23:58.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
CVE ID: CVE-2013-2764 State: PUBLISHED Published: 2020-01-28T19:58:11 Last Updated: 2024-08-06T15:44:33.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Entry Server before 4.7.0 contains a URI Redirection vulnerability which could allow remote attackers to conduct phishing attacks due to HSP_AbsoluteRedirects being disabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89853
CVE ID: CVE-2013-2765 State: PUBLISHED Published: 2013-07-15T15:00:00 Last Updated: 2024-08-06T15:44:33.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/message.php?msg_id=30900019 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=967615 - http://lists.opensuse.org/open
suse-updates/2013-08/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=967615 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html - http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html - https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES - http://www.shookalabs.com/ - http://www.modsecurity.org/ - https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py - https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba - http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
CVE ID: CVE-2013-2766 State: PUBLISHED Published: 2013-04-10T15:00:00 Last Updated: 2024-08-06T15:44:33.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAHSQ - http://www.securitytracker.com/id/1028371 - http://www.securityfocus.com/bid/59038
CVE ID: CVE-2013-2767 State: PUBLISHED Published: 2013-04-25T20:00:00Z Last Updated: 2024-09-17T00:26:32.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/ctx137238 - http://www.kb.cert.org/vuls/id/521612
CVE ID: CVE-2013-2770 State: PUBLISHED Published: 2013-04-07T17:00:00Z Last Updated: 2024-09-17T03:53:38.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011965
CVE ID: CVE-2013-2773 State: PUBLISHED Published: 2020-01-14T14:25:06 Last Updated: 2024-08-06T15:44:33.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58928
CVE ID: CVE-2013-2776 State: PUBLISHED Published: 2013-04-08T17:00:00 Last Updated: 2024-08-06T15:44:33.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but the
erminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.sudo.ws/repos/sudo/rev/049a12a5cc14 - http://www.securityfocus.com/bid/58207 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839 - http://rhn.redhat.com/errata/RHSA-2013-1701.html - http://www.debian.org/security/2013/dsa-2642 - http://www.openwall.com/lists/oss-security/2013/02/27/31 - http://www.sudo.ws/repos/sudo/rev/0c0283d1fafa - http://www.sudo.ws/
www.openwall.com/lists/oss-security/2013/02/27/31 - http://www.sudo.ws/repos/sudo/rev/0c0283d1fafa - http://www.sudo.ws/sudo/alerts/tty_tickets.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440 - https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/87023 - http://www.securityfocus.com/bid/62741 - http://rhn.redhat.com/errata/RHSA-2013-1353.html - https://support.apple.com/kb/HT205031 - https://bugzilla.redhat.com/show_bug.cgi?id=916365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82453
CVE ID: CVE-2013-2777 State: PUBLISHED Published: 2013-04-08T17:00:00 Last Updated: 2024-08-06T15:44:33.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SP
this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.sudo.ws/repos/sudo/rev/bfa23f089bba - http://www.securityfocus.com/bid/58207 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839 - http://www.sudo.ws/repos/sudo/rev/2f3225a2a4a4 - http://rhn.redhat.com/errata/RHSA-2013-1701.html - http://www.debian.org/security/2013/dsa-2642 - http://www.openwall.com/lists/oss-security/2013/02/27/31 - http://www.sudo.ws/sudo/alerts/tty_tickets.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001
- http://www.sudo.ws/sudo/alerts/tty_tickets.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440 - https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/87023 - https://support.apple.com/kb/HT205031 - https://bugzilla.redhat.com/show_bug.cgi?id=916365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82453
CVE ID: CVE-2013-2778 State: PUBLISHED Published: 2013-04-09T01:00:00Z Last Updated: 2024-09-17T03:13:45.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html
CVE ID: CVE-2013-2779 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T02:41:37.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
st Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000
CVE ID: CVE-2013-2780 State: PUBLISHED Published: 2013-04-22T01:00:00 Last Updated: 2024-08-06T15:44:33.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port). Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf
CVE ID: CVE-2013-2781 State: PUBLISHED Published: 2013-05-23T10:00:00Z Last Updated: 2024-09-16T22:25:44.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-142-01
CVE ID: CVE-2013-2782 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-16T16:22:35.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01 - http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf
CVE ID: CVE-2013-2783 State: PUBLISHED Published: 2013-06-14T19:00:00Z Last Updated: 2024-09-16T17:53:04.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified control via crafted data to TCP port 20000. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-161-01
CVE ID: CVE-2013-2784 State: PUBLISHED Published: 2013-07-10T22:00:00Z Last Updated: 2024-09-16T22:55:39.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of data in Modbus/TCP packets, which allows remote attackers to cause a denial of service (networking outage) via a crafted packet to TCP port 502. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-189-02
CVE ID: CVE-2013-2785 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-09-16T22:24:45.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212, aka ZDI-CAN-1621 and ZDI-CAN-1624. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-170-01 - http://support.ge-ip.com/support/index?page
ainer: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-170-01 - http://support.ge-ip.com/support/index?page=kbchannel&id=KB15602
CVE ID: CVE-2013-2786 State: PUBLISHED Published: 2013-07-10T22:00:00Z Last Updated: 2024-09-16T21:02:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-184-01
CVE ID: CVE-2013-2787 State: PUBLISHED Published: 2013-10-13T10:00:00Z Last Updated: 2024-09-17T01:20:42.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-282-01
CVE ID: CVE-2013-2788 State: PUBLISHED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T00:07:21.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-252-01
CVE ID: CVE-2013-2789 State: PUBLISHED Published: 2013-08-22T01:00:00Z Last Updated: 2024-09-16T18:28:46.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service (master-station infinite loop) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-226-01
CVE ID: CVE-2013-2790 State: PUBLISHED Published: 2013-08-13T01:00:00Z Last Updated: 2024-09-17T00:16:50.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to TCP port 20000. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-213-03
CVE ID: CVE-2013-2791 State: PUBLISHED Published: 2013-09-09T10:00:00Z Last Updated: 2024-09-16T18:39:43.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service (master-station daemon crash) via a malformed DNP3 TCP packet from the IP address of an outstation. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-213-04A - http://www.opcsupport.com/ics/support/KBAnswer.asp?questionID=2890
CVE ID: CVE-2013-2792 State: PUBLISHED Published: 2013-08-09T23:00:00Z Last Updated: 2024-09-17T01:41:42.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-219-01
CVE ID: CVE-2013-2793 State: PUBLISHED Published: 2013-09-09T10:00:00Z Last Updated: 2024-09-16T23:35:30.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01 - http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf
CVE ID: CVE-2013-2794 State: PUBLISHED Published: 2013-09-09T10:00:00Z Last Updated: 2024-09-17T02:32:41.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01 - http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf
CVE ID: CVE-2013-2795 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-2796 State: PUBLISHED Published: 2013-08-09T23:00:00Z Last Updated: 2024-09-16T18:13:41.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.citect.schneider-electric.com/cs-HF720SP4
e. Additional Analyst Notes: - CVE Program Container: References: - http://www.citect.schneider-electric.com/cs-HF720SP459363 - http://ics-cert.us-cert.gov/advisories/ICSA-13-217-02