Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27156 State: PUBLISHED Published: 2021-02-10T18:38:06 Last Updated: 2024-08-03T20:40:47.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27157 State: PUBLISHED Published: 2021-02-10T18:37:54 Last Updated: 2024-08-03T20:40:47.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 888888 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27158 State: PUBLISHED Published: 2021-02-10T18:37:47 Last Updated: 2024-08-03T20:40:47.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng / 888888 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27159 State: PUBLISHED Published: 2021-02-10T18:37:38 Last Updated: 2024-08-03T20:40:47.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27160 State: PUBLISHED Published: 2021-02-10T18:37:28 Last Updated: 2024-08-03T20:40:47.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27161 State: PUBLISHED Published: 2021-02-10T18:37:20 Last Updated: 2024-08-03T20:40:47.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27162 State: PUBLISHED Published: 2021-02-10T18:37:12 Last Updated: 2024-08-03T20:40:47.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27163 State: PUBLISHED Published: 2021-02-10T18:37:02 Last Updated: 2024-08-03T20:40:47.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27164 State: PUBLISHED Published: 2021-02-10T18:36:54 Last Updated: 2024-08-03T20:40:47.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27165 State: PUBLISHED Published: 2021-02-10T18:36:42 Last Updated: 2024-08-03T20:40:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27166 State: PUBLISHED Published: 2021-02-10T18:36:31 Last Updated: 2024-08-03T20:40:47.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27167 State: PUBLISHED Published: 2021-02-10T18:36:20 Last Updated: 2024-08-03T20:40:47.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init_3bb_password in libci_adaptation_layer.so. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27168 State: PUBLISHED Published: 2021-02-10T18:36:09 Last Updated: 2024-08-03T20:40:47.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27169 State: PUBLISHED Published: 2021-02-10T18:35:59 Last Updated: 2024-08-03T20:40:47.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27170 State: PUBLISHED Published: 2021-02-10T18:35:48 Last Updated: 2024-08-03T20:40:47.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6
CVE ID: CVE-2021-27171 State: PUBLISHED Published: 2021-02-10T18:35:36 Last Updated: 2024-08-03T20:40:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell (or tshell). Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-privilege-escalation
CVE ID: CVE-2021-27172 State: PUBLISHED Published: 2021-02-10T18:35:20 Last Updated: 2024-08-03T20:40:47.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials
CVE ID: CVE-2021-27173 State: PUBLISHED Published: 2021-02-10T18:35:09 Last Updated: 2024-08-03T20:40:47.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI). Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak
CVE ID: CVE-2021-27174 State: PUBLISHED Published: 2021-02-10T18:34:59 Last Updated: 2024-08-03T20:40:47.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files
CVE ID: CVE-2021-27175 State: PUBLISHED Published: 2021-02-10T18:34:49 Last Updated: 2024-08-03T20:40:47.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files
CVE ID: CVE-2021-27176 State: PUBLISHED Published: 2021-02-10T18:34:40 Last Updated: 2024-08-03T20:40:47.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files
CVE ID: CVE-2021-27177 State: PUBLISHED Published: 2021-02-10T18:34:30 Last Updated: 2024-08-03T20:40:47.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-auth-bypass
CVE ID: CVE-2021-27178 State: PUBLISHED Published: 2021-02-10T18:34:16 Last Updated: 2024-08-03T20:40:47.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-nvram
CVE ID: CVE-2021-27179 State: PUBLISHED Published: 2021-02-10T18:33:53 Last Updated: 2024-08-03T20:40:47.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-dos
CVE ID: CVE-2021-27180 State: PUBLISHED Published: 2021-04-14T22:26:56 Last Updated: 2024-08-03T20:40:47.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user. Additional Analyst Notes: - CVE Program Container: References: - https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/ - https://github.com/chudyPB/MDaemon-Advisories
CVE ID: CVE-2021-27181 State: PUBLISHED Published: 2021-04-14T22:28:29 Last Updated: 2024-08-03T20:40:47.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the value of the anti-CSRF token, the attacker may trick the user into visiting his malicious page and performing any request with the privileges of attacked user. Additional Analyst Notes: - CVE Program Container: References: - https://
request with the privileges of attacked user. Additional Analyst Notes: - CVE Program Container: References: - https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/ - https://github.com/chudyPB/MDaemon-Advisories
CVE ID: CVE-2021-27182 State: PUBLISHED Published: 2021-04-14T22:29:59 Last Updated: 2024-08-03T20:40:47.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user. Additional Analyst Notes: - CVE Program Container: References: - https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/ - https://github.com/chudyPB/MDaemon-Advisories
CVE ID: CVE-2021-27183 State: PUBLISHED Published: 2021-04-14T22:32:08 Last Updated: 2024-08-03T20:40:47.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly lead to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/ - https://github.com/chudyPB/MDaemon-Advisories
CVE ID: CVE-2021-27184 State: PUBLISHED Published: 2021-02-11T05:38:19 Last Updated: 2024-08-03T20:40:47.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the ControlPointCacheShare.xml file (in a %APPDATA%\Pelco directory) when DSControlPoint.exe is executed. Additional Analyst Notes: - CVE Program Container: References: - https://suppo
ory) when DSControlPoint.exe is executed. Additional Analyst Notes: - CVE Program Container: References: - https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history - https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server.txt
CVE ID: CVE-2021-27185 State: PUBLISHED Published: 2021-02-10T21:04:28 Last Updated: 2024-08-03T20:40:47.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eflexsystems/node-samba-client/releases/tag/4.0.0 - https://github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235 - https://www.npmjs.com/package/samba-client - https://security.netapp.com/advisory/ntap-20210319-0002/ - https://advisory.checkmarx.net/advisory/CX-2021-4302
CVE ID: CVE-2021-27186 State: PUBLISHED Published: 2021-02-10T21:24:31 Last Updated: 2024-08-03T20:40:47.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fluent/fluent-bit/issues/3044 - https://github.com/fluent/fluent-bit/pull/3045 - https://github.com/fluent/fluent-bit/pull/3047
CVE ID: CVE-2021-27187 State: PUBLISHED Published: 2021-02-12T07:58:37 Last Updated: 2024-08-03T20:40:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked. Additional Analyst Notes: - CVE Program Container: References: - https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html - https://github.com/jet-pentest/CVE-2021-27187
CVE ID: CVE-2021-27188 State: PUBLISHED Published: 2021-02-12T08:00:11 Last Updated: 2024-08-03T20:40:47.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html - https://github.com/jet-pentest/CVE-2021-27188
CVE ID: CVE-2021-27189 State: PUBLISHED Published: 2021-02-22T23:16:51 Last Updated: 2024-08-03T20:40:47.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html - http://seclists.org/fulldisclosure/2021/Feb/72 - http://packetstormsecurity.com/files/161507/CIRA-Canadian-Shield-Man-In-The-Middle.html
CVE ID: CVE-2021-27190 State: PUBLISHED Published: 2021-02-12T02:24:50 Last Updated: 2024-08-03T20:40:47.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7 - https://www.secuneus.com/cve-2021
erences: - https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7 - https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/ - https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS - https://github.com/vulf/Peel-Shopping-cart-9.4.0-Stored-XSS - https://github.com/advisto/peel-shopping/issues/4#issuecomment-953461611
CVE ID: CVE-2021-27191 State: PUBLISHED Published: 2021-02-11T16:21:43 Last Updated: 2024-08-03T20:40:47.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JoeScho/get-ip-range/commit/98ca22b815c77273cbab259811ab0976118e13b6 - https://www.npmjs.com/package/get-ip-range - https://security.netapp.com/advisory/ntap-20210319-0002/ - https://advisory.checkmarx.net/advisory/CX-2021-4304
CVE ID: CVE-2021-27192 State: PUBLISHED Published: 2021-03-25T18:29:27 Last Updated: 2024-08-03T20:40:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients. Additional Analyst Notes: - CVE Program Container: References: - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight
CVE ID: CVE-2021-27193 State: PUBLISHED Published: 2021-03-25T18:29:34 Last Updated: 2024-08-03T20:40:47.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight
CVE ID: CVE-2021-27194 State: PUBLISHED Published: 2021-03-25T18:29:40 Last Updated: 2024-08-03T20:40:47.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight
CVE ID: CVE-2021-27195 State: PUBLISHED Published: 2021-03-25T18:30:44 Last Updated: 2024-08-03T20:40:47.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight
CVE ID: CVE-2021-27196 State: PUBLISHED Published: 2021-06-14T21:20:38.696789Z Last Updated: 2024-09-17T03:17:31.626Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the devic
sses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB