Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Kernel Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423
CVE ID: CVE-2023-23424 State: PUBLISHED Published: 2023-12-29T02:51:13.917Z Last Updated: 2024-11-27T15:26:24.855Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Honor Products: NTH-AN00 Description: Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23424/
CVE ID: CVE-2023-23426 State: PUBLISHED Published: 2023-12-29T02:54:47.927Z Last Updated: 2024-08-02T10:28:40.953Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: Honor Products: FRI-AN00 Description: Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23426/
CVE ID: CVE-2023-23427 State: PUBLISHED Published: 2023-12-29T02:58:41.511Z Last Updated: 2024-08-02T10:28:40.829Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic OS Problem Types: CWE-269 Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23427/
CVE ID: CVE-2023-23428 State: PUBLISHED Published: 2023-12-29T03:02:16.998Z Last Updated: 2024-08-02T10:28:40.865Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic OS Problem Types: CWE-269 Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23428/
CVE ID: CVE-2023-23429 State: PUBLISHED Published: 2023-12-29T03:06:35.184Z Last Updated: 2024-08-02T10:28:40.854Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Honor Products: Magic OS Problem Types: CWE-269 Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23429/
CVE ID: CVE-2023-23430 State: PUBLISHED Published: 2023-12-29T03:09:10.957Z Last Updated: 2025-04-17T20:23:15.293Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Honor Products: com.hihonor.magichome Problem Types: CWE-269 Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23430/
CVE ID: CVE-2023-23431 State: PUBLISHED Published: 2023-12-29T01:32:38.086Z Last Updated: 2024-09-09T17:43:50.000Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Honor Products: NTH-AN00 Problem Types: CWE-347 Description: Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23431/
CVE ID: CVE-2023-23432 State: PUBLISHED Published: 2023-12-29T01:20:05.826Z Last Updated: 2024-11-27T15:27:00.946Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Honor Products: NTH-AN00 Problem Types: CWE-347 Description: Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23432/
CVE ID: CVE-2023-23433 State: PUBLISHED Published: 2023-12-29T01:49:15.081Z Last Updated: 2024-08-02T10:28:40.858Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Honor Products: NTH-AN00 Problem Types: CWE-347 Description: Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23433/
CVE ID: CVE-2023-23434 State: PUBLISHED Published: 2023-12-29T02:05:48.279Z Last Updated: 2024-08-02T10:28:41.059Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Honor Products: HonorBoardApp Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23434/
CVE ID: CVE-2023-23435 State: PUBLISHED Published: 2023-12-29T02:08:26.355Z Last Updated: 2024-08-02T10:28:40.956Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic OS Problem Types: CWE-347 Description: Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23435/
CVE ID: CVE-2023-23436 State: PUBLISHED Published: 2023-12-29T02:12:01.783Z Last Updated: 2024-08-02T10:28:40.967Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Honor Products: Magic OS Problem Types: CWE-347 Description: Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23436/
CVE ID: CVE-2023-23437 State: PUBLISHED Published: 2023-12-29T02:15:09.314Z Last Updated: 2024-10-29T19:13:19.856Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Honor Products: com.hihonor.vmall Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23437/
CVE ID: CVE-2023-23438 State: PUBLISHED Published: 2023-12-29T02:19:58.450Z Last Updated: 2024-08-02T10:28:40.953Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Honor Products: LGE-AN00 Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23438/
CVE ID: CVE-2023-23439 State: PUBLISHED Published: 2023-12-29T02:44:27.460Z Last Updated: 2024-08-02T10:28:40.916Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: LGE-AN00 Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23439/
CVE ID: CVE-2023-23440 State: PUBLISHED Published: 2023-12-29T02:47:56.978Z Last Updated: 2024-09-09T17:43:18.639Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Honor Products: LGE-AN00 Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23440/
CVE ID: CVE-2023-23441 State: PUBLISHED Published: 2023-12-29T03:11:48.552Z Last Updated: 2024-08-02T10:28:40.921Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Honor Products: Magic UI Description: Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23441/
CVE ID: CVE-2023-23442 State: PUBLISHED Published: 2023-12-29T03:15:52.271Z Last Updated: 2024-08-02T10:28:40.947Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-23442/
CVE ID: CVE-2023-23443 State: PUBLISHED Published: 2023-12-29T03:18:41.853Z Last Updated: 2025-04-17T20:22:45.720Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hihonor.com/global/security/cve-2023-23443/
CVE ID: CVE-2023-23444 State: PUBLISHED Published: 2023-05-12T12:39:26.532Z Last Updated: 2025-01-24T16:16:26.175Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SICK AG Products: UE410-EN3 FLEXI ETHERNET GATEW., UE410-EN1 FLEXI ETHERNET GATEW., UE410-EN4 FLEXI ETHERNET GATEW., FX0-GENT00000 FLEXISOFT EIP GATEW., FX0-GMOD00000 FLEXISOFT MOD GATEW., FX0-GPNT00000 FLEXISOFT PNET GATEW., FX0-GENT00030 FLEXISOFT EIP GATEW.V2, FX0-GPNT00030 FLEXISOFT PNET GATEW.V2, FX0-GMOD00010 FLEXISOFT MOD GW (C), FX3-GEPR00000 FLEXISOFT EFI-PRO GW, FX3-GEPR00010 FLEXISOFT EFI-PRO GW, FX0-GETC00000 FLEXISOFT ETC GW, FX0-GETC00040 FLEXISOFT ETC GW, FX0-GETC00010 FLEXISOFT ETC GW
010 FLEXISOFT EFI-PRO GW, FX0-GETC00000 FLEXISOFT ETC GW, FX0-GETC00040 FLEXISOFT ETC GW, FX0-GETC00010 FLEXISOFT ETC GW (C), FX0-GENT00010 FLEXISOFT EIP GW (C), FX0-GPNT00010 FLEXISOFT PNET GW (C), UE410-EN3 FLEXI ETHERNET GATEW. Firmware, UE410-EN1 FLEXI ETHERNET GATEW. Firmware, UE410-EN4 FLEXI ETHERNET GATEW. Firmware, FX0-GENT00000 FLEXISOFT EIP GATEW. Firmware, FX0-GMOD00000 FLEXISOFT MOD GATEW. Firmware, FX0-GPNT00000 FLEXISOFT PNET GATEW. Firmware, FX0-GENT00030 FLEXISOFT EIP GATEW.V2 Firmware, FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 Firmware, FX0-GMOD00010 FLEXISOFT MOD GW (C) Firmware, FX3-GEPR00000 FLEXISOFT EFI-PRO GW Firmware, FX3-GEPR00010 FLEXISOFT EFI-PRO GW Firmware, FX0-GETC0
MOD GW (C) Firmware, FX3-GEPR00000 FLEXISOFT EFI-PRO GW Firmware, FX3-GEPR00010 FLEXISOFT EFI-PRO GW Firmware, FX0-GETC00000 FLEXISOFT ETC GW Firmware, FX0-GETC00040 FLEXISOFT ETC GW Firmware, FX0-GETC00010 FLEXISOFT ETC GW (C) Firmware, FX0-GENT00010 FLEXISOFT EIP GW (C) Firmware, FX0-GPNT00010 FLEXISOFT PNET GW (C) Firmware Problem Types: Missing Authentication for Critical Function Description: Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to inf
1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.json
CVE ID: CVE-2023-23445 State: PUBLISHED Published: 2023-05-15T10:51:44.194Z Last Updated: 2025-01-23T19:17:56.655Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-284 Description: Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access t
100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23446 State: PUBLISHED Published: 2023-05-15T10:52:30.269Z Last Updated: 2025-01-23T19:16:29.331Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-284 Description: Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a
100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23447 State: PUBLISHED Published: 2023-05-15T10:53:05.800Z Last Updated: 2025-01-23T19:15:53.962Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-400 Description: Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the av
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23448 State: PUBLISHED Published: 2023-05-15T10:53:31.506Z Last Updated: 2025-01-23T19:15:26.526Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-540 Description: Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain informa
with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23449 State: PUBLISHED Published: 2023-05-15T10:54:46.463Z Last Updated: 2025-01-23T19:13:54.619Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-204 Description: Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid u
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23450 State: PUBLISHED Published: 2023-05-15T10:55:10.687Z Last Updated: 2025-01-23T19:09:01.324Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SICK AG Products: SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR Problem Types: CWE-836 Description: Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote
LOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
CVE ID: CVE-2023-23451 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:24:56.399Z Vendors: N/A Products: SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010, SICK FX0-GPNT00000, SICK FX0-GPNT00030, SICK UE410-EN1, SICK UE410-EN3, SICK UE410-EN3S04, SICK UE410-EN4 Problem Types: CWE-477 Description: The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHE
, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW
0030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt
CVE ID: CVE-2023-23452 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:08:09.924Z Vendors: n/a Products: FX0-GPNT v3 Firmware Problem Types: CWE-306 Description: Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt
CVE ID: CVE-2023-23453 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-18T15:01:59.836Z Vendors: n/a Products: FX0-GENT v3 Firmware Problem Types: CWE-306 Description: Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt
CVE ID: CVE-2023-23454 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-03-20T20:55:38.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/01/10/1 - https://www.openwall.com/lists/oss-security/2023/01/10/4 - https://git.kernel.org/pub/scm/linux/k
ecurity/2023/01/10/1 - https://www.openwall.com/lists/oss-security/2023/01/10/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=caa4b35b4317d5147b3ab0fbdc9c075c7d2e9c12 - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html