Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27457 State: PUBLISHED Published: 2021-05-20T11:51:36 Last Updated: 2024-08-03T20:48:17.312Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-326 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27458 State: PUBLISHED Published: 2021-04-19T21:07:55 Last Updated: 2024-08-03T20:48:17.229Z Vendors: n/a Products: JTEKT Corporation TOYOPUC products Problem Types: CWE-404 Description: If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All
versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03
CVE ID: CVE-2021-27459 State: PUBLISHED Published: 2021-05-20T11:51:40 Last Updated: 2024-08-03T20:48:17.182Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-434 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27460 State: PUBLISHED Published: 2022-03-23T19:46:29.000Z Last Updated: 2025-04-16T16:40:10.459Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-502 Description: Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent machines. Additional Analyst Notes: - CVE Program Container: -
to the FactoryTalk AssetCentre main server and all agent machines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27461 State: PUBLISHED Published: 2021-05-20T11:51:44 Last Updated: 2024-08-03T20:48:17.169Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-22 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27462 State: PUBLISHED Published: 2022-03-23T19:46:30.000Z Last Updated: 2025-04-16T16:39:59.120Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-502 Description: A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/adv
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27463 State: PUBLISHED Published: 2021-05-20T11:05:42 Last Updated: 2024-08-03T20:48:17.198Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-539 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27464 State: PUBLISHED Published: 2022-03-23T19:46:30.000Z Last Updated: 2025-04-16T16:39:49.678Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-89 Description: The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rock
ner: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27465 State: PUBLISHED Published: 2021-05-20T11:05:47 Last Updated: 2024-08-03T20:48:17.319Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-79 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27466 State: PUBLISHED Published: 2022-03-23T19:46:34.000Z Last Updated: 2025-04-16T16:39:07.289Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-502 Description: A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27467 State: PUBLISHED Published: 2021-05-20T11:05:52 Last Updated: 2024-08-03T20:48:17.228Z Vendors: n/a Products: Emerson Rosemount X-STREAM Gas Analyzer Problem Types: CWE-1021 Description: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
CVE ID: CVE-2021-27468 State: PUBLISHED Published: 2022-03-23T19:46:32.000Z Last Updated: 2025-04-16T16:39:28.963Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-89 Description: The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwell
- CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27470 State: PUBLISHED Published: 2022-03-23T19:46:35.000Z Last Updated: 2025-04-16T16:38:56.225Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-502 Description: A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/adv
CVE ID: CVE-2021-27471 State: PUBLISHED Published: 2022-03-23T19:46:37.000Z Last Updated: 2025-04-16T17:58:57.027Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: Connected Components Workbench Problem Types: CWE-22 Description: The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of
cessfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE ID: CVE-2021-27472 State: PUBLISHED Published: 2022-03-23T19:46:31.000Z Last Updated: 2025-04-16T16:39:37.678Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-89 Description: A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/a
richment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27473 State: PUBLISHED Published: 2022-03-23T19:46:36.000Z Last Updated: 2025-04-16T16:38:45.599Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rockwell Automation Products: Connected Components Workbench Problem Types: CWE-22 Description: Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. This type of vulnerability is also commonly referred to as a Zip Slip. A local, authenticated attacker can create a malicious .ccwarc archive file that, when opened by Connected Components Workbench, will allow the attacker to gain the privileges of t
rc archive file that, when opened by Connected Components Workbench, will allow the attacker to gain the privileges of the software. If the software is running at SYSTEM level, the attacker will gain admin level privileges. User interaction is required for this exploit to be successful. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE ID: CVE-2021-27474 State: PUBLISHED Published: 2022-03-23T19:46:33.000Z Last Updated: 2025-04-16T16:39:18.735Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-676 Description: Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https:
ram Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27475 State: PUBLISHED Published: 2022-03-23T19:46:38.000Z Last Updated: 2025-04-16T17:58:45.843Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: Connected Components Workbench Problem Types: CWE-502 Description: Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited. Additional Analyst Notes: - CV
ode execution. This vulnerability requires user interaction to be successfully exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE ID: CVE-2021-27476 State: PUBLISHED Published: 2022-03-23T19:46:36.000Z Last Updated: 2025-04-16T16:38:33.744Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk AssetCentre Problem Types: CWE-78 Description: A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisori
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 - https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE ID: CVE-2021-27477 State: PUBLISHED Published: 2021-07-01T12:01:36 Last Updated: 2024-08-03T20:48:17.271Z Vendors: n/a Products: JTEKT Corporation TOYOPUC PLC Problem Types: CWE-119 Description: When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop. Additional Analyst Notes: - CVE Program Container: Referen
C CPU detects a system error, and the affected products stop. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04
CVE ID: CVE-2021-27478 State: PUBLISHED Published: 2022-05-12T19:17:22.000Z Last Updated: 2025-04-16T16:22:32.573Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: EIPStackGroup Products: OpENer EtherNet/IP Problem Types: CWE-681 Description: A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02 - https://github.com/EIPStackGroup/OpENer
CVE ID: CVE-2021-27479 State: PUBLISHED Published: 2021-06-16T12:16:36 Last Updated: 2024-08-03T20:48:17.358Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-79 Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE ID: CVE-2021-27480 State: PUBLISHED Published: 2021-04-27T11:18:12 Last Updated: 2024-08-03T20:48:17.278Z Vendors: n/a Products: Delta Industrial Automation COMMGR Problem Types: CWE-121 Description: Delta Industrial Automation COMMGR Versions 1.12 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute remote code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03
CVE ID: CVE-2021-27481 State: PUBLISHED Published: 2021-06-16T11:59:39 Last Updated: 2024-08-03T20:48:17.256Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-321 Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE ID: CVE-2021-27482 State: PUBLISHED Published: 2022-05-12T19:18:03.000Z Last Updated: 2025-04-16T16:22:25.057Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EIPStackGroup Products: OpENer EtherNet/IP Problem Types: CWE-125 Description: A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02 - https://github.com/EIPStackGroup/OpENer
CVE ID: CVE-2021-27483 State: PUBLISHED Published: 2021-06-16T12:17:09 Last Updated: 2024-08-03T21:26:08.928Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-269 Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE ID: CVE-2021-27485 State: PUBLISHED Published: 2021-06-16T12:16:47 Last Updated: 2024-08-03T21:26:09.022Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-257 Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE ID: CVE-2021-27486 State: PUBLISHED Published: 2021-04-12T14:36:05 Last Updated: 2024-08-03T21:26:08.941Z Vendors: n/a Products: FATEK Automation WinProladder Problem Types: CWE-191 Description: FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01
CVE ID: CVE-2021-27487 State: PUBLISHED Published: 2021-06-16T11:59:46 Last Updated: 2024-08-03T21:26:08.954Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-312 Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE ID: CVE-2021-27488 State: PUBLISHED Published: 2021-05-27T15:37:25 Last Updated: 2024-08-03T21:26:08.930Z Vendors: n/a Products: Datakit Software libraries embedded in Luxion KeyShot software Problem Types: CWE-787 Description: Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing CATPart files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https
ecute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-563/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01
CVE ID: CVE-2021-27489 State: PUBLISHED Published: 2021-06-16T11:59:33 Last Updated: 2024-08-03T21:26:08.972Z Vendors: n/a Products: ZOLL Defibrillator Dashboard Problem Types: CWE-434 Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01