Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Abbott has developed a firmware update to help mitigate the identified vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 - http://www.securityfocus.com/bid/100523
CVE ID: CVE-2017-12717 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.462Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-427 Description: An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12718 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.539Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: CWE-120 Description: A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation. Additional Analyst
alicious input infrequently and under certain conditions, increasing the difficulty of exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/101252 - http://www.securityfocus.com/bid/100665 - https://www.exploit-db.com/exploits/43776/
CVE ID: CVE-2017-12719 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T18:43:56.468Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-822 Description: An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101685 - https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02
CVE ID: CVE-2017-12720 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.602Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Improper Access Control Description: An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12721 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.602Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Improper Certificate Validation Description: An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12722 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.562Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Out-of-bounds Read Description: An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the communications module would not impact the operation of the therapeutic module. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-
eration of the therapeutic module. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/101252 - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12723 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.470Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Password in Configuration File Description: A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/10066
ntainer: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12724 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.473Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Use of Hard-coded Credentials Description: A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured to allow FTP connections. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - h
ional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12725 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.615Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Use of Hard-coded Credentials Description: A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establish a wireless network connection even if the pump is Ethernet connected and active; however, if the wireless association is established and the Ethernet
even if the pump is Ethernet connected and active; however, if the wireless association is established and the Ethernet cable is attached, the pump does not attach the network stack to the wireless network. In this scenario, all network traffic is instead directed over the wired Ethernet connection. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12726 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T18:43:56.536Z Vendors: n/a Products: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Problem Types: Use of Hard-coded Password Description: A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that it is not possible to upload files via Telnet and the impact of this vulnerability is limited to the communications module. Additional Analyst Notes: - CVE
via Telnet and the impact of this vulnerability is limited to the communications module. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - http://www.securityfocus.com/bid/100665
CVE ID: CVE-2017-12728 State: PUBLISHED Published: 2017-10-04T07:00:00 Last Updated: 2024-08-05T18:43:56.611Z Vendors: n/a Products: SpiderControl SCADA Web Server Problem Types: CWE-269 Description: An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-250-01 - http://www.securityfocus.com/bid/100668
CVE ID: CVE-2017-12729 State: PUBLISHED Published: 2018-01-18T19:00:00 Last Updated: 2024-08-05T18:43:56.614Z Vendors: n/a Products: Moxa SoftCMS Live Viewer Problem Types: CWE-89 Description: A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-243-05
CVE ID: CVE-2017-12730 State: PUBLISHED Published: 2017-10-06T04:00:00 Last Updated: 2024-08-05T18:43:56.662Z Vendors: n/a Products: mySCADA myPRO Problem Types: CWE-428 Description: An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100815 - https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01
CVE ID: CVE-2017-12731 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T18:43:56.536Z Vendors: n/a Products: OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite Problem Types: CWE-89 Description: A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of malicious SQL queries via the input from the client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100563 - https://
ent. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100563 - https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04
CVE ID: CVE-2017-12732 State: PUBLISHED Published: 2017-10-05T21:00:00 Last Updated: 2024-08-05T18:43:56.655Z Vendors: n/a Products: GE CIMPLICITY Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101174 - https://ics-cert.us-cert.gov/advisories/ICSA-17-278-01
CVE ID: CVE-2017-12733 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T18:43:56.570Z Vendors: n/a Products: OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite Problem Types: CWE-306 Description: A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
inistrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100563 - https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04
CVE ID: CVE-2017-12734 State: PUBLISHED Published: 2017-08-30T19:00:00 Last Updated: 2024-08-05T18:43:56.700Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-895 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with network access to the integrated web server on port 80/tcp could obtain the session ID of an active user session. A user must be logged in to the web interface. Siemens recommends to use the integrated webserver on port 80/tcp only in trusted networks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100560 - https://cert-po
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100560 - https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf
CVE ID: CVE-2017-12735 State: PUBLISHED Published: 2017-08-30T19:00:00 Last Updated: 2024-08-05T18:43:56.601Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-300 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100561 - https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf
CVE ID: CVE-2017-12736 State: PUBLISHED Published: 2017-12-26T04:00:00Z Last Updated: 2025-08-12T11:10:44.721Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC,
V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS90
S8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGG
ND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (
COM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920
, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P, SCALANCE XB205-3 (SC, PN), SCALANCE XB205-3 (ST, E/IP), SCALANCE XB205-3 (ST, PN), SCALANCE XB205-3LD (SC, E/IP), SCALANCE XB205-3LD (SC, PN), SCALANCE XB206-2 (SC), SCALANCE XB206-2 (ST/BFOC), SCALANCE XB206-2 LD, SCALANCE XB206-2 SC, SCALANCE XB206-2 ST, SCALANCE XB206-2LD, SCALANCE XB208 (E/IP), SCALANCE XB208 (PN), SCALANCE XB213-3 (SC, E/IP), SCALANCE XB213-3 (SC, PN), SCAL
ANCE XB206-2LD, SCALANCE XB208 (E/IP), SCALANCE XB208 (PN), SCALANCE XB213-3 (SC, E/IP), SCALANCE XB213-3 (SC, PN), SCALANCE XB213-3 (ST, E/IP), SCALANCE XB213-3 (ST, PN), SCALANCE XB213-3LD (SC, E/IP), SCALANCE XB213-3LD (SC, PN), SCALANCE XB216 (E/IP), SCALANCE XB216 (PN), SCALANCE XC206-2 (SC), SCALANCE XC206-2 (ST/BFOC), SCALANCE XC206-2G PoE, SCALANCE XC206-2G PoE (54 V DC), SCALANCE XC206-2G PoE EEC (54 V DC), SCALANCE XC206-2SFP, SCALANCE XC206-2SFP EEC, SCALANCE XC206-2SFP G, SCALANCE XC206-2SFP G (EIP DEF.), SCALANCE XC206-2SFP G EEC, SCALANCE XC208, SCALANCE XC208EEC, SCALANCE XC208G, SCALANCE XC208G (EIP def.), SCALANCE XC208G EEC, SCALANCE XC208G PoE, SCALANCE XC208G PoE (54 V DC
EEC, SCALANCE XC208G, SCALANCE XC208G (EIP def.), SCALANCE XC208G EEC, SCALANCE XC208G PoE, SCALANCE XC208G PoE (54 V DC), SCALANCE XC216, SCALANCE XC216-3G PoE, SCALANCE XC216-3G PoE (54 V DC), SCALANCE XC216-4C, SCALANCE XC216-4C G, SCALANCE XC216-4C G (EIP Def.), SCALANCE XC216-4C G EEC, SCALANCE XC216EEC, SCALANCE XC224, SCALANCE XC224-4C G, SCALANCE XC224-4C G (EIP Def.), SCALANCE XC224-4C G EEC, SCALANCE XF204, SCALANCE XF204 DNA, SCALANCE XF204-2BA, SCALANCE XF204-2BA DNA, SCALANCE XF204G, SCALANCE XM408-4C, SCALANCE XM408-4C (L3 int.), SCALANCE XM408-8C, SCALANCE XM408-8C (L3 int.), SCALANCE XM416-4C, SCALANCE XM416-4C (L3 int.), SCALANCE XP208, SCALANCE XP208 (Ethernet/IP), SCALANCE
408-8C (L3 int.), SCALANCE XM416-4C, SCALANCE XM416-4C (L3 int.), SCALANCE XP208, SCALANCE XP208 (Ethernet/IP), SCALANCE XP208EEC, SCALANCE XP208G, SCALANCE XP208G EEC, SCALANCE XP208G PoE EEC, SCALANCE XP208G PP, SCALANCE XP208PoE EEC, SCALANCE XP216, SCALANCE XP216 (Ethernet/IP), SCALANCE XP216 (V2), SCALANCE XP216EEC, SCALANCE XP216EEC (V2), SCALANCE XP216G, SCALANCE XP216G EEC, SCALANCE XP216G PoE EEC, SCALANCE XP216POE EEC, SCALANCE XP216PoE EEC (V2), SCALANCE XR324WG (24 x FE, AC 230V), SCALANCE XR324WG (24 X FE, DC 24V), SCALANCE XR326-2C PoE WG, SCALANCE XR326-2C PoE WG (without UL), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V), SCALANCE XR328-4C
E WG (without UL), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V), SCALANCE XR328-4C WG (28xGE, AC 230V), SCALANCE XR328-4C WG (28xGE, DC 24V), SCALANCE XR524-8C, 1x230V, SCALANCE XR524-8C, 1x230V (L3 int.), SCALANCE XR524-8C, 24V, SCALANCE XR524-8C, 24V (L3 int.), SCALANCE XR524-8C, 2x230V, SCALANCE XR524-8C, 2x230V (L3 int.), SCALANCE XR526-8C, 1x230V, SCALANCE XR526-8C, 1x230V (L3 int.), SCALANCE XR526-8C, 24V, SCALANCE XR526-8C, 24V (L3 int.), SCALANCE XR526-8C, 2x230V, SCALANCE XR526-8C, 2x230V (L3 int.), SCALANCE XR528-6M, SCALANCE XR528-6M (2HR2, L3 int.), SCALANCE XR528-6M (2HR2), SCALANCE XR528-6M (L3 int.)
V (L3 int.), SCALANCE XR528-6M, SCALANCE XR528-6M (2HR2, L3 int.), SCALANCE XR528-6M (2HR2), SCALANCE XR528-6M (L3 int.), SCALANCE XR552-12M, SCALANCE XR552-12M (2HR2, L3 int.), SCALANCE XR552-12M (2HR2), SIPLUS NET SCALANCE XC206-2, SIPLUS NET SCALANCE XC206-2SFP, SIPLUS NET SCALANCE XC208, SIPLUS NET SCALANCE XC216-4C Problem Types: CWE-1188 Description: After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.
rform unauthorized administrative actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf - http://www.securitytracker.com/id/1039463 - http://www.securitytracker.com/id/1039464 - http://www.securityfocus.com/bid/101041 - https://cert-portal.siemens.com/productcert/html/ssa-856721.html
CVE ID: CVE-2017-12737 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T18:43:56.676Z Vendors: n/a Products: Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 Problem Types: leak of sensitive device information Description: An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.s
tive device information over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf - http://www.securityfocus.com/bid/101884
CVE ID: CVE-2017-12738 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T18:43:56.530Z Vendors: n/a Products: Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 Problem Types: XSS Description: An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into clicking on a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/poo
g on a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf - http://www.securityfocus.com/bid/101884