Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nces: - https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01 - http://www.securityfocus.com/bid/108926
CVE ID: CVE-2019-10965 State: PUBLISHED Published: 2019-05-28T21:54:26 Last Updated: 2024-08-04T22:40:15.689Z Vendors: Emerson Products: Emerson Ovation OCR400 Controller Problem Types: Buffer Overflow Description: In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01 - http://www.securityfocus.com/bid/108
m Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01 - http://www.securityfocus.com/bid/108499
CVE ID: CVE-2019-10966 State: PUBLISHED Published: 2019-07-10T17:52:23 Last Updated: 2024-08-04T22:40:15.555Z Vendors: GE Products: Aestiva and Aespire Problem Types: CWE-287 Description: In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109102 - https://www.us-cert.gov/ics/advisories/icsma-19-190-01
CVE ID: CVE-2019-10967 State: PUBLISHED Published: 2019-05-28T21:59:06 Last Updated: 2024-08-04T22:40:15.538Z Vendors: Emerson Products: Emerson Ovation OCR400 Controller Problem Types: CWE-121 Description: In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01 - http://www.securityfocus.com/b
Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01 - http://www.securityfocus.com/bid/108499
CVE ID: CVE-2019-10968 State: PUBLISHED Published: 2019-07-24T14:46:14 Last Updated: 2024-08-04T22:40:15.622Z Vendors: Philips Products: Philips Holter 2010 Plus Problem Types: CWE-477 Description: Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-192-01
CVE ID: CVE-2019-10969 State: PUBLISHED Published: 2019-10-08T18:41:28 Last Updated: 2024-08-04T22:40:15.499Z Vendors: n/a Products: Moxa EDR 810 Problem Types: CWE-20 Description: Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-274-03 - http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html
CVE ID: CVE-2019-10970 State: PUBLISHED Published: 2019-07-11T19:51:27 Last Updated: 2024-08-04T22:40:15.648Z Vendors: n/a Products: Rockwell Automation PanelView 5510 Problem Types: CWE-284 Description: In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109105 - https://www.us-cert.gov/ics/advisories/
- CVE Program Container: References: - http://www.securityfocus.com/bid/109105 - https://www.us-cert.gov/ics/advisories/icsa-19-190-02
CVE ID: CVE-2019-10971 State: PUBLISHED Published: 2019-06-12T15:03:59 Last Updated: 2024-08-04T22:40:15.456Z Vendors: n/a Products: Network Configurator for DeviceNet Safety Problem Types: CWE-426 Description: The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-134-01
CVE ID: CVE-2019-10972 State: PUBLISHED Published: 2019-07-25T23:31:47 Last Updated: 2024-08-04T22:40:15.483Z Vendors: Mitsubishi Electric Products: Mitsubishi Electric FR Configurator2 Problem Types: CWE-400 Description: Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-204-01
CVE ID: CVE-2019-10973 State: PUBLISHED Published: 2019-07-08T17:25:30 Last Updated: 2024-08-04T22:40:15.634Z Vendors: n/a Products: Quest KACE Problem Types: CWE-20 Description: Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109001 - https://www.us-cert.gov/ics/advisories/icsa-19-183-02
CVE ID: CVE-2019-10974 State: PUBLISHED Published: 2019-07-25T23:37:50 Last Updated: 2024-08-04T22:40:15.660Z Vendors: National Renewable Energy Laboratory (NREL) Products: EnergyPlus Problem Types: CWE-121 Description: NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-204-02
CVE ID: CVE-2019-10975 State: PUBLISHED Published: 2019-07-02T19:15:15 Last Updated: 2024-08-04T22:40:15.661Z Vendors: Fuji Electric Products: Alpha7 PC Loader Problem Types: CWE-125 Description: An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108359 - https://www.zerodayinitiative.com/advisories/ZDI-19-517/ - https://www.us-cert.gov/ics/advisories/ICSA-19-136-02%2C - https://felib.fujielectric.co.jp/download/search2.htm?dosearch=1&site=global&lang=en&documentGroup=software
CVE ID: CVE-2019-10976 State: PUBLISHED Published: 2019-07-25T23:27:48 Last Updated: 2024-08-04T22:40:15.615Z Vendors: Mitsubishi Electric Products: Mitsubishi Electric FR Configurator2 Problem Types: CWE-611 Description: Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-204-01
CVE ID: CVE-2019-10977 State: PUBLISHED Published: 2019-05-23T13:28:22 Last Updated: 2024-08-04T22:40:15.601Z Vendors: Mitsubishi Electric Products: MELSEC-Q series Ethernet module Problem Types: CWE-400 Description: In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02 - http://www.securityfocus.com/bid/108419
CVE ID: CVE-2019-10978 State: PUBLISHED Published: 2019-09-23T15:58:32 Last Updated: 2024-08-04T22:40:15.538Z Vendors: n/a Products: Red Lion Controls Crimson (Windows configuration software) Problem Types: CWE-119 Description: Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-248-01
CVE ID: CVE-2019-10979 State: PUBLISHED Published: 2019-07-01T20:05:10 Last Updated: 2024-08-04T22:40:15.569Z Vendors: SICK Products: MSC800 Problem Types: CWE-798 Description: SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108924 - https://www.us-cert.gov/ics/advisories/icsa-19-178-04 - https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
CVE ID: CVE-2019-10980 State: PUBLISHED Published: 2019-08-05T18:39:38 Last Updated: 2024-08-04T22:40:15.478Z Vendors: n/a Products: LCDS LAquis SCADA Problem Types: CWE-843 Description: A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-06
CVE ID: CVE-2019-10981 State: PUBLISHED Published: 2019-05-31T20:59:47 Last Updated: 2024-08-04T22:40:15.636Z Vendors: AVEVA Products: AVEVA Vijeo Citect and CitectSCADA Problem Types: CWE-522 Description: In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01 - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf - http://www.securityfocus.com/bid/108543 - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-10982 State: PUBLISHED Published: 2019-07-24T14:51:27 Last Updated: 2024-08-04T22:40:15.604Z Vendors: Delta Electronics Products: CNCSoft ScreenEditor Problem Types: CWE-122 Description: Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-192-01
CVE ID: CVE-2019-10983 State: PUBLISHED Published: 2019-06-28T20:38:08 Last Updated: 2024-08-04T22:40:15.527Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Other Description: In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-621/
CVE ID: CVE-2019-10984 State: PUBLISHED Published: 2019-09-23T15:58:41 Last Updated: 2024-08-04T22:40:15.699Z Vendors: n/a Products: Red Lion Controls Crimson (Windows configuration software) Problem Types: CWE-465 Description: Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-248-01
CVE ID: CVE-2019-10985 State: PUBLISHED Published: 2019-06-28T20:05:33 Last Updated: 2024-08-04T22:40:15.691Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Directory Traversal (Local File Inclusion) Description: In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage this vulnerability to delete files while posing as an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-622/
CVE ID: CVE-2019-10987 State: PUBLISHED Published: 2019-06-28T20:49:28 Last Updated: 2024-08-04T22:40:15.688Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Other Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-584/ - https://www.zerodayinitiative.com/advisories/ZDI-19-587/
CVE ID: CVE-2019-10988 State: PUBLISHED Published: 2019-09-04T13:36:31 Last Updated: 2024-08-04T22:40:15.537Z Vendors: n/a Products: Philips HDI 4000 Ultrasound Systems Problem Types: CWE-477 Description: In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thus, any unmitigated vulnerability in the old operating system could be exploited to affect this product. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-241-02
CVE ID: CVE-2019-10989 State: PUBLISHED Published: 2019-06-28T20:31:48 Last Updated: 2024-08-04T22:40:15.634Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Buffer Overflow Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-10991. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-590/ - https://www.zerodayin
ert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-590/ - https://www.zerodayinitiative.com/advisories/ZDI-19-591/
CVE ID: CVE-2019-10990 State: PUBLISHED Published: 2019-09-23T15:46:43 Last Updated: 2024-08-04T22:40:15.501Z Vendors: n/a Products: Red Lion Controls Crimson (Windows configuration software) Problem Types: CWE-321 Description: Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-248-01
CVE ID: CVE-2019-10991 State: PUBLISHED Published: 2019-06-28T20:25:56 Last Updated: 2024-08-04T22:40:15.589Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Buffer Overflow Description: In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-592/ - https://www.zerodayinitiative.com/advisories/ZDI-19-620/ - https://www.z
.zerodayinitiative.com/advisories/ZDI-19-592/ - https://www.zerodayinitiative.com/advisories/ZDI-19-620/ - https://www.zerodayinitiative.com/advisories/ZDI-19-588/ - https://www.zerodayinitiative.com/advisories/ZDI-19-586/ - https://www.zerodayinitiative.com/advisories/ZDI-19-594/ - https://www.zerodayinitiative.com/advisories/ZDI-19-589/ - https://www.zerodayinitiative.com/advisories/ZDI-19-619/
CVE ID: CVE-2019-10992 State: PUBLISHED Published: 2019-07-24T14:55:19 Last Updated: 2024-08-04T22:40:15.645Z Vendors: Delta Electronics Products: CNCSoft ScreenEditor Problem Types: CWE-125 Description: Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-192-01
CVE ID: CVE-2019-10993 State: PUBLISHED Published: 2019-06-28T20:52:48 Last Updated: 2024-08-04T22:40:15.647Z Vendors: WebAccess Products: WebAccess/SCADA Problem Types: Other Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-178-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-617/ - https://www.zerodayinitiative.com/advisories/ZDI-19-612/ - https://www.zerodayinitiative.com/advisories/ZDI-19-602/ - https://www.zerodayinitiative.com/advisories/ZDI-19-606/ -
- https://www.zerodayinitiative.com/advisories/ZDI-19-602/ - https://www.zerodayinitiative.com/advisories/ZDI-19-606/ - https://www.zerodayinitiative.com/advisories/ZDI-19-603/ - https://www.zerodayinitiative.com/advisories/ZDI-19-605/ - https://www.zerodayinitiative.com/advisories/ZDI-19-623/ - https://www.zerodayinitiative.com/advisories/ZDI-19-597/ - https://www.zerodayinitiative.com/advisories/ZDI-19-618/ - https://www.zerodayinitiative.com/advisories/ZDI-19-611/ - https://www.zerodayinitiative.com/advisories/ZDI-19-601/ - https://www.zerodayinitiative.com/advisories/ZDI-19-616/ - https://www.zerodayinitiative.com/advisories/ZDI-19-607/ - https://www.zerodayinitiative.com/advisories/ZDI
DI-19-616/ - https://www.zerodayinitiative.com/advisories/ZDI-19-607/ - https://www.zerodayinitiative.com/advisories/ZDI-19-614/ - https://www.zerodayinitiative.com/advisories/ZDI-19-615/ - https://www.zerodayinitiative.com/advisories/ZDI-19-613/ - https://www.zerodayinitiative.com/advisories/ZDI-19-598/
CVE ID: CVE-2019-10994 State: PUBLISHED Published: 2019-08-05T18:41:18 Last Updated: 2024-08-04T22:40:15.649Z Vendors: n/a Products: LCDS LAquis SCADA Problem Types: CWE-125 Description: Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information. The attacker must have local access to the system. A CVSS v3 base score of 2.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-06
CVE ID: CVE-2019-10995 State: PUBLISHED Published: 2020-01-14T16:20:10 Last Updated: 2024-08-04T22:40:15.592Z Vendors: n/a Products: ABB CP651 HMI products Problem Types: CWE-798 Description: ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108928 - https://www.us-cert.gov/ics/advisories/icsa-19-178-02
CVE ID: CVE-2019-10996 State: PUBLISHED Published: 2019-09-23T15:58:11 Last Updated: 2024-08-04T22:40:15.649Z Vendors: n/a Products: Red Lion Controls Crimson (Windows configuration software) Problem Types: CWE-416 Description: Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-248-01
CVE ID: CVE-2019-10997 State: PUBLISHED Published: 2019-06-17T17:59:18 Last Updated: 2024-08-04T22:40:15.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be restarted manually via a Linux shell. Additional Analyst Notes: - CVE Program Container: References: - https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdf
CVE ID: CVE-2019-10998 State: PUBLISHED Published: 2019-06-18T12:10:17 Last Updated: 2024-08-04T22:40:15.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://dam-mdc.phoenixcontact.com/asset/156443151564/fa7be4d04c301f18c6cc0e0872193a42/Security_Advisory_AXC_F_2152_FW.pdf
CVE ID: CVE-2019-10999 State: PUBLISHED Published: 2019-05-06T19:30:57 Last Updated: 2024-08-04T22:40:15.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-93
L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-932L (2.17.01 and below), DCS-933L (1.14.11 and below), and DCS-934L (1.05.04 and below). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fuzzywalls/CVE-2019-10999 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10131