Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12095 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-16T23:40:31.798Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Circle Media Products: Circle Problem Types: wi-fi access point vulnerability Description: An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_repo
ility. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0447
CVE ID: CVE-2017-12096 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T01:26:25.130Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Circle Media Products: Circle Problem Types: access point deauthorization Description: An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed "deauth" packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
ofed "deauth" packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448
CVE ID: CVE-2017-12097 State: PUBLISHED Published: 2018-01-19T20:00:00Z Last Updated: 2024-09-16T23:40:30.424Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Talos Products: delayed_job_web rails gem Problem Types: XSS Description: An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
d user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102484 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449
CVE ID: CVE-2017-12098 State: PUBLISHED Published: 2018-01-19T19:00:00 Last Updated: 2024-08-05T18:28:16.424Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102486
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102486 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0450
CVE ID: CVE-2017-12099 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T04:23:53.862Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability. Additional Analys
er can convince a user to open the file or use it as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0451
CVE ID: CVE-2017-12100 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T19:47:06.894Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Con
onvince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0452
CVE ID: CVE-2017-12101 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:21:19.414Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE
tacker can convince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0453
CVE ID: CVE-2017-12102 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T16:54:15.396Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Not
ince a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0454
CVE ID: CVE-2017-12103 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T17:48:11.347Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Addi
attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0455
CVE ID: CVE-2017-12104 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T21:58:26.726Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Notes:
a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0456
CVE ID: CVE-2017-12105 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T23:50:58.695Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Add
n attacker can convince a user to open the file or use the file as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0457
CVE ID: CVE-2017-12106 State: PUBLISHED Published: 2017-10-05T19:00:00Z Last Updated: 2024-09-16T23:45:34.456Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: remote code execution Description: A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101189 - https://www.talosintelligenc
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101189 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0458
CVE ID: CVE-2017-12107 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T00:26:01.151Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Computerinsel Products: Photoline Problem Types: parsing code execution Description: An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0459
CVE ID: CVE-2017-12108 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T00:51:06.588Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017
Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0460
CVE ID: CVE-2017-12109 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T16:22:32.714Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-04
lyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0461
CVE ID: CVE-2017-12110 State: PUBLISHED Published: 2017-11-20T22:00:00Z Last Updated: 2024-09-17T00:11:20.704Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462
CVE ID: CVE-2017-12111 State: PUBLISHED Published: 2017-11-20T22:00:00Z Last Updated: 2024-09-16T18:19:15.759Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-6
ogram Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0463
CVE ID: CVE-2017-12112 State: PUBLISHED Published: 2018-01-19T22:00:00Z Last Updated: 2024-09-16T19:25:48.209Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https:/
lity. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0464
CVE ID: CVE-2017-12113 State: PUBLISHED Published: 2018-01-19T23:00:00Z Last Updated: 2024-09-16T23:41:02.567Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https:
ility. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0465
CVE ID: CVE-2017-12114 State: PUBLISHED Published: 2018-01-19T22:00:00Z Last Updated: 2024-09-17T00:36:20.233Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://w
ty. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0466
CVE ID: CVE-2017-12115 State: PUBLISHED Published: 2018-01-19T22:00:00Z Last Updated: 2024-09-16T16:58:17.274Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/T
ainer: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0467
CVE ID: CVE-2017-12116 State: PUBLISHED Published: 2018-01-19T23:00:00Z Last Updated: 2024-09-17T01:56:02.137Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - h
nerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0468
CVE ID: CVE-2017-12117 State: PUBLISHED Published: 2018-01-19T22:00:00Z Last Updated: 2024-09-17T03:52:34.712Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://w
ty. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0469
CVE ID: CVE-2017-12118 State: PUBLISHED Published: 2018-01-19T23:00:00Z Last Updated: 2024-09-16T20:47:22.337Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Talos Products: CPP-Ethereum Problem Types: authorization bypass Description: An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). An attacker can send JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0470
CVE ID: CVE-2017-12119 State: PUBLISHED Published: 2018-01-19T23:00:00Z Last Updated: 2024-09-17T03:53:37.460Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: CPP-Ethereum Problem Types: denial of service Description: An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
References: - http://www.securityfocus.com/bid/102475 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471
CVE ID: CVE-2017-12120 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T16:33:59.260Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Talos Products: Moxa Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the "/goform/net_WebPingGetValue" URI to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vuln
s vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0472
CVE ID: CVE-2017-12121 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T18:13:49.032Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Talos Products: Moxa Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the rsakey\_name= parm in the "/goform/WebRSAKEYGen" uri to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vuln
s vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0473