Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
acker to cause a denial of service condition on affected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-337522.html
CVE ID: CVE-2022-40226 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-04-21T13:48:13.932Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SICAM P850, SICAM P855 Problem Types: CWE-384 Description: A vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions
(All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855
10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
her user's session after login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
CVE ID: CVE-2022-40227 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T12:14:39.944Z Vendors: Siemens Products: SIMATIC HMI Comfort Panels (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels, SIMATIC HMI KTP1200 Basic, SIMATIC HMI KTP400 Basic, SIMATIC HMI KTP700 Basic, SIMATIC HMI KTP900 Basic, SIPLUS HMI KTP1200 BASIC, SIPLUS HMI KTP400 BASIC, SIPLUS HMI KTP700 BASIC, SIPLUS HMI KTP900 BASIC Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), S
SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiri
over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-384224.pdf
CVE ID: CVE-2022-40228 State: PUBLISHED Published: 2022-11-22T18:52:13.196Z Last Updated: 2025-04-25T19:56:58.200Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: DataPower Gateway Problem Types: CWE-613 Description: IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6840759 - ht
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6840759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235527
CVE ID: CVE-2022-40230 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T20:13:28.518Z Vendors: n/a Products: IBM MQ Appliance Problem Types: Session Fixation Description: "IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6622051
CVE ID: CVE-2022-40231 State: PUBLISHED Published: 2023-02-17T18:22:51.727Z Last Updated: 2025-03-12T20:00:01.667Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: 284 Improper Access Control Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6954771 - https://exchange.xforce.ibmcloud.
CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6954771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235533
CVE ID: CVE-2022-40232 State: PUBLISHED Published: 2023-02-17T17:44:47.900Z Last Updated: 2025-03-12T20:00:58.149Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: 284 Improper Access Control Description: IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6954465 - https://exchange.xforce.ib
iner: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6954465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235597
CVE ID: CVE-2022-40233 State: PUBLISHED Published: 2022-12-23T18:42:55.351Z Last Updated: 2025-04-15T13:48:36.778Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6847947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235599
CVE ID: CVE-2022-40234 State: PUBLISHED Published: 2022-09-19T17:25:12.750865Z Last Updated: 2024-09-16T23:45:52.788Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/UI:N/S:U/I:N/A:N/AC:H/PR:N/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Spectrum Protect Plus Problem Types: Obtain Information Description: Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718. Additional Analyst Notes: - CVE Prog
n the private key information for the uploaded certificate. IBM X-Force ID: 235718. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6619947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235718
CVE ID: CVE-2022-40235 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-02T20:11:52.751Z Vendors: n/a Products: IBM InfoSphere Information Server Problem Types: Denial of Service Description: "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation. IBM X-Force ID: 235725." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6829369
CVE ID: CVE-2022-40237 State: PUBLISHED Published: 2023-02-27T14:18:08.342Z Last Updated: 2024-08-03T12:14:39.825Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ for HPE NonStop Problem Types: CWE-20 Description: IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6958136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/235727
CVE ID: CVE-2022-40238 State: PUBLISHED Published: 2022-10-26T15:15:45.247Z Last Updated: 2025-05-07T13:31:41.213Z Vendors: CERT/CC Products: VINCE - The Vulnerability Information and Coordination Environment Problem Types: CWE-502 Description: A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
CVE ID: CVE-2022-40242 State: PUBLISHED Published: 2022-12-05T21:29:01.684Z Last Updated: 2025-04-23T14:03:26.695Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: AMI Products: MegaRAC SPx12, MegaRAC SPx13 Problem Types: CWE-798 Description: MegaRAC Default Credentials Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf
CVE ID: CVE-2022-40246 State: PUBLISHED Published: 2022-09-20T17:35:33.274Z Last Updated: 2025-05-28T18:41:09.998Z Vendors: AMI Products: Aptio Problem Types: CWE-123 Description: A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: SbPei SHA256: d827182e
can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: SbPei SHA256: d827182e5f9b7a9ff0b9d3e232f7cfac43b5237e2681e11f005be627a49283a9 Module GUID: c1fbd624-27ea-40d1-aa48-94c3dc5c7e0d Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ami.com/security-center/ - https://www.binarly.io/advisories/BRLY-2022-014
CVE ID: CVE-2022-40248 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T12:14:39.964Z Vendors: CERT/CC Products: VINCE - The Vulnerability Information and Coordination Environment Problem Types: CWE-74 Description: An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
CVE ID: CVE-2022-40250 State: PUBLISHED Published: 2022-09-20T17:35:34.218Z Last Updated: 2025-05-28T18:23:09.410Z Vendors: AMI Products: Aptio Problem Types: CWE-121 Description: An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, t
ant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: SmmSmbiosElog SHA256: 3a8acb4f9bddccb19ec3b22b22ad97963711550f76b27b606461cd5073a93b59 Module GUID: 8e61fd6b-7a8b-404f-b83f-aa90a47cabdf This issue affects: AMI Aptio 5.x. This issue affects: AMI Aptio 5.x. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-ce
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html - https://www.ami.com/security-center/ - https://www.binarly.io/advisories/BRLY-2022-016
CVE ID: CVE-2022-40257 State: PUBLISHED Published: 2022-10-10T00:00:00 Last Updated: 2024-08-03T12:14:39.964Z Vendors: CERT/CC Products: VINCE - The Vulnerability Information and Coordination Environment Problem Types: CWE-74 Description: An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a crafted email with HTML content in the Subject field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
CVE ID: CVE-2022-40258 State: PUBLISHED Published: 2023-01-31T00:53:48.188Z Last Updated: 2025-03-27T17:18:26.154Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: AMI Products: MegaRAC SPx-12, MegaRAC SPx-13 Problem Types: CWE-916 Description: AMI Megarac Weak password hashes for Redfish & API Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf - https://security.netapp.com/advisory/ntap-20230731-0008/
CVE ID: CVE-2022-40259 State: PUBLISHED Published: 2022-12-05T21:33:13.256Z Last Updated: 2025-04-23T14:54:39.659Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: AMI Products: MegaRAC SPx12, MegaRAC SPx13 Problem Types: CWE-798 Description: MegaRAC Default Credentials Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf
CVE ID: CVE-2022-40261 State: PUBLISHED Published: 2022-09-20T17:35:35.152Z Last Updated: 2025-05-28T18:06:33.176Z Vendors: AMI Products: Aptio Problem Types: CWE-120 Description: An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, t
ant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: OverClockSmiHandler SHA256: a204699576e1a48ce915d9d9423380c8e4c197003baf9d17e6504f0265f3039c Module GUID: 4698C2BD-A903-410E-AD1F-5EEF3A1AE422 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ami.com/security-center/ - https://www.binarly.io/advisories/BRLY-2022-003
CVE ID: CVE-2022-40262 State: PUBLISHED Published: 2022-09-20T17:35:36.008Z Last Updated: 2025-05-27T18:13:02.778Z Vendors: AMI Products: Aptio Problem Types: CWE-123 Description: A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a
to the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ami.com/security-center/ - https://www.binarly.io/advisories/BRLY-2022-009
CVE ID: CVE-2022-40263 State: PUBLISHED Published: 2022-11-04T18:58:53.817Z Last Updated: 2025-04-30T20:26:41.219Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Becton Dickson (BD) Products: BD Totalys MultiProcessor Problem Types: CWE-798 Description: BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additiona
iable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-totalys-multiprocessor-hardcoded-credentials
CVE ID: CVE-2022-40264 State: PUBLISHED Published: 2022-12-13T23:32:57.049Z Last Updated: 2025-04-18T14:46:00.625Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: ICONICS and Mitsubishi Electric Corporation Products: GENESIS64 Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
roject package file crafted by the attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf - https://jvn.jp/vu/JVNVU95858406/index.html - https://iconics.com/About/Security/CERT - https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-01
CVE ID: CVE-2022-40265 State: PUBLISHED Published: 2022-11-30T00:04:43.069Z Last Updated: 2025-04-24T18:45:03.895Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series RJ71EN71, MELSEC iQ-R Series R04/08/16/32/120ENCPU Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially
ion "65" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition by sending specially crafted packets. A system reset is required for recovery. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-017_en.pdf - https://jvn.jp/vu/JVNVU94702422
CVE ID: CVE-2022-40266 State: PUBLISHED Published: 2022-11-24T08:20:14.606Z Last Updated: 2025-04-25T17:56:41.874Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Products: GOT2000 Series GT27 model, GOT2000 Series GT25 model, GOT2000 Series GT23 model Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 and prior, Mitsubishi Electric GOT2000 Series GT25 model FTP server versions 01.39.000 and prior and Mitsubishi Electric GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a De
c GOT2000 Series GT23 model FTP server versions 01.39.000 and prior allows a remote authenticated attacker to cause a Denial of Service condition by sending specially crafted command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-016_en.pdf - https://jvn.jp/vu/JVNVU95633416
CVE ID: CVE-2022-40267 State: PUBLISHED Published: 2023-01-20T07:52:56.784Z Last Updated: 2024-08-03T12:14:39.972Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-F Series FX5U-32MT/ES, MELSEC iQ-F Series FX5U-64MT/ES, MELSEC iQ-F Seres FX5U-80MT/ES, MELSEC iQ-F Series FX5U-32MR/ES, MELSEC iQ-F Series FX5U-64MR/ES, MELSEC iQ-F Series FX5U-80MR/ES, MELSEC iQ-F Series FX5U-32MT/DS, MELSEC iQ-F Series FX5U-64MT/DS, MELSEC iQ-F Series FX5U-80MT/DS, MELSEC iQ-F Series FX5U-32MR/DS, MELSEC iQ-F Series FX5U-64MR/DS, MELSEC iQ-F Series FX5U-80MR/DS, MELSEC iQ-F Series FX5U-32MT/ESS, MELSEC iQ-F Series FX5U-64MT/ESS
Series FX5U-64MR/DS, MELSEC iQ-F Series FX5U-80MR/DS, MELSEC iQ-F Series FX5U-32MT/ESS, MELSEC iQ-F Series FX5U-64MT/ESS, MELSEC iQ-F Series FX5U-80MT/ESS, MELSEC iQ-F Series FX5U-32MT/DSS, MELSEC iQ-F Series FX5U-64MT/DSS, MELSEC iQ-F Series FX5U-80MT/DSS, MELSEC iQ-F Series FX5UC-32MT/D, MELSEC iQ-F Series FX5UC-64MT/D, MELSEC iQ-F Series FX5UC-96MT/D, MELSEC iQ-F Series FX5UC-32MT/DSS, MELSEC iQ-F Series FX5UC-64MT/DSS, MELSEC iQ-F Series FX5UC-96MT/DSS, MELSEC iQ-F Series FX5UC-32MT/DS-TS, MELSEC iQ-F Series FX5UC-32MT/DSS-TS, MELSEC iQ-F Series FX5UC-32MR/DS-TS, MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series