Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33718 State: PUBLISHED Published: 2021-07-13T11:03:06 Last Updated: 2024-08-03T23:58:22.807Z Vendors: Siemens Products: Mendix Applications using Mendix 7, Mendix Applications using Mendix 8, Mendix Applications using Mendix 9 Problem Types: CWE-863 Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Applications using Mendix 9 (All versions < V9.3.0). Write access checks of attributes of an object could be bypassed, if user has a write permissions to the first attribute of this object. Additional Analyst Notes: - CVE Program Container: References
a write permissions to the first attribute of this object. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-352521.pdf
CVE ID: CVE-2021-33719 State: PUBLISHED Published: 2021-09-14T10:47:35 Last Updated: 2024-08-03T23:58:22.916Z Vendors: Siemens Products: SIPROTEC 5 relays with CPU variants CP050, SIPROTEC 5 relays with CPU variants CP100, SIPROTEC 5 relays with CPU variants CP300 Problem Types: CWE-120 Description: A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution. Additional Analyst Notes: - CVE Prog
3/tcp could cause a Denial-of-Service condition or potential remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf
CVE ID: CVE-2021-33720 State: PUBLISHED Published: 2021-09-14T10:47:36 Last Updated: 2024-08-03T23:58:22.902Z Vendors: Siemens Products: SIPROTEC 5 relays with CPU variants CP050, SIPROTEC 5 relays with CPU variants CP100, SIPROTEC 5 relays with CPU variants CP300 Problem Types: CWE-120 Description: A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https:
3/tcp could cause a Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf
CVE ID: CVE-2021-33721 State: PUBLISHED Published: 2021-08-10T10:35:32 Last Updated: 2024-08-03T23:58:22.827Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-78 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on the system with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-756744.pdf
CVE ID: CVE-2021-33722 State: PUBLISHED Published: 2021-10-12T09:49:23 Last Updated: 2024-08-03T23:58:22.756Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary files on an affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33723 State: PUBLISHED Published: 2021-10-12T09:49:24 Last Updated: 2024-08-03T23:58:22.810Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-285 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33724 State: PUBLISHED Published: 2021-10-12T09:49:25 Last Updated: 2024-08-03T23:58:22.867Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33725 State: PUBLISHED Published: 2021-10-12T09:49:26 Last Updated: 2024-08-03T23:58:22.911Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33726 State: PUBLISHED Published: 2021-10-12T09:49:27 Last Updated: 2024-08-03T23:58:22.801Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33727 State: PUBLISHED Published: 2021-10-12T09:49:27 Last Updated: 2024-08-03T23:58:22.816Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-200 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33728 State: PUBLISHED Published: 2021-10-12T09:49:28 Last Updated: 2024-08-03T23:58:22.903Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-502 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary code on the device with root privileges. Additional Analyst Notes: - CVE Program Container: References:
xecute arbitrary code on the device with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33729 State: PUBLISHED Published: 2021-10-12T09:49:29 Last Updated: 2024-08-03T23:58:23.102Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary commands in the local database. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33730 State: PUBLISHED Published: 2021-10-12T09:49:30 Last Updated: 2024-08-03T23:58:22.941Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33731 State: PUBLISHED Published: 2021-10-12T09:49:31 Last Updated: 2024-08-03T23:58:22.852Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33732 State: PUBLISHED Published: 2021-10-12T09:49:32 Last Updated: 2024-08-03T23:58:22.873Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33733 State: PUBLISHED Published: 2021-10-12T09:49:33 Last Updated: 2024-08-03T23:58:22.841Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33734 State: PUBLISHED Published: 2021-10-12T09:49:34 Last Updated: 2024-08-03T23:58:22.867Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33735 State: PUBLISHED Published: 2021-10-12T09:49:34 Last Updated: 2024-08-03T23:58:22.843Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33736 State: PUBLISHED Published: 2021-10-12T09:49:35 Last Updated: 2024-08-03T23:58:22.869Z Vendors: Siemens Products: SINEC NMS Problem Types: CWE-89 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
CVE ID: CVE-2021-33737 State: PUBLISHED Published: 2021-09-14T10:47:38 Last Updated: 2024-08-03T23:58:22.953Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C) Vendors: Siemens Products: SIMATIC CP 343-1 (incl. SIPLUS variants), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants), SIMATIC CP 343-1 ERPC, SIMATIC CP 343-1 Lean (incl. SIPLUS variants), SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced Problem Types: CWE-119 Description: A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC
IPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf
ations. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-549234.pdf
CVE ID: CVE-2021-33738 State: PUBLISHED Published: 2021-08-10T10:35:33 Last Updated: 2024-08-03T23:58:22.886Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13405) Additional Analyst Notes: - CVE Program
ility to leak information in the context of the current process. (ZDI-CAN-13405) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-981/
CVE ID: CVE-2021-33739 State: PUBLISHED Published: 2021-06-08T22:46:43.000Z Last Updated: 2025-10-21T23:25:43.048Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33739
CVE ID: CVE-2021-33740 State: PUBLISHED Published: 2021-07-14T17:53:18 Last Updated: 2024-08-03T23:58:22.857Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507 Problem Types: Remote Code Execution Description: Windows Media Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33740
CVE ID: CVE-2021-33741 State: PUBLISHED Published: 2021-06-08T22:46:43 Last Updated: 2024-08-03T23:58:22.832Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33741
CVE ID: CVE-2021-33742 State: PUBLISHED Published: 2021-06-08T22:46:44.000Z Last Updated: 2025-10-21T23:25:42.892Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 Problem Types: Remote Code Execution Description:
er 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 Problem Types: Remote Code Execution Description: Windows MSHTML Platform Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33742
CVE ID: CVE-2021-33743 State: PUBLISHED Published: 2021-07-14T17:53:19 Last Updated: 2024-08-03T23:58:22.877Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows Projected File System Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/se
ulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33743
CVE ID: CVE-2021-33744 State: PUBLISHED Published: 2021-07-14T17:53:20 Last Updated: 2024-08-03T23:58:22.900Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows Server version 20H2 Problem Types: Security Feature Bypass Description: Windows Secure Kernel Mode Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory
Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33744
CVE ID: CVE-2021-33745 State: PUBLISHED Published: 2021-07-14T17:53:21 Last Updated: 2024-08-03T23:58:22.864Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 20
Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows DNS Server Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33745
CVE ID: CVE-2021-33746 State: PUBLISHED Published: 2021-07-14T17:53:22 Last Updated: 2024-10-01T15:54:06.789Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (
ice Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33746
CVE ID: CVE-2021-33749 State: PUBLISHED Published: 2021-07-14T17:53:23 Last Updated: 2024-11-19T14:50:29.111Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server C
Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Snap-in Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33749
CVE ID: CVE-2021-33750 State: PUBLISHED Published: 2021-07-14T17:53:24 Last Updated: 2024-08-03T23:58:22.847Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server C
Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Snap-in Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33750