Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2508 State: PUBLISHED Published: 2023-09-20T15:05:35.512Z Last Updated: 2024-09-24T15:20:41.975Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: PaperCut MF/NG Products: Mobility Print Problem Types: CWE-352 Description: The `PaperCutNG Mobility Print` version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host (in the "configure printer discovery" section). This is possible because the application has no protections against CSRF attacks, like Anti-CSRF tokens, header origin validation, samesite cookies, etc. Additional Analyst Notes: - CVE Program Contai
, like Anti-CSRF tokens, header origin validation, samesite cookies, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/solveig/ - https://www.papercut.com/help/manuals/mobility-print/release-history/#mobility-print-server
CVE ID: CVE-2023-2509 State: PUBLISHED Published: 2023-05-17T06:33:37.536Z Last Updated: 2025-01-22T16:51:46.681Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ASUSTOR Products: ADM, LooksGood, SoundsGood Problem Types: CWE-79 Description: A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 an
ducts and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=22
CVE ID: CVE-2023-2510 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-2511 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-2512 State: PUBLISHED Published: 2023-05-12T10:09:06.905Z Last Updated: 2025-01-24T15:18:13.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Cloudflare Products: workerd Problem Types: CWE-125 Description: Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach() method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a segmentation fault, but could theoretically allow arbitrary undefined behavior. In order for the bug to be exploitable, the process would nee
ut could theoretically allow arbitrary undefined behavior. In order for the bug to be exploitable, the process would need to be able to allocate 160GB of RAM. Due to this, the bug was never exploitable on the Cloudflare Workers platform, but could theoretically be exploitable on deployments of workerd running on machines with a huge amount of memory. Moreover, in order to be remotely exploited, an attacker would have to upload a single form-encoded HTTP request of at least tens of gigabytes in size. The application code would then have to use request.formData() to parse the request and formData.forEach() to iterate over this data. Due to these limitations, the exploitation likelihood was con
request and formData.forEach() to iterate over this data. Due to these limitations, the exploitation likelihood was considered Low. A fix that addresses this vulnerability has been released in version v1.20230419.0 and users are encouraged to update to the latest version available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/workerd/releases/tag/v1.20230419.0 - https://github.com/cloudflare/workerd/security/advisories/GHSA-8vx6-69vg-c46f
CVE ID: CVE-2023-2513 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-04-23T16:21:53.558Z Vendors: n/a Products: Linux kernel ext4 filesystem Problem Types: CWE-416 Description: A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/20220616021358.2504451-1-libaokun1%40huawei.com/ - https://github.com/torvalds/linux/commit/67d7d8ad99be - https://bugzilla.redhat.co
8.2504451-1-libaokun1%40huawei.com/ - https://github.com/torvalds/linux/commit/67d7d8ad99be - https://bugzilla.redhat.com/show_bug.cgi?id=2193097
CVE ID: CVE-2023-2514 State: PUBLISHED Published: 2023-05-12T08:56:56.250Z Last Updated: 2024-12-06T23:04:13.945Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-2515 State: PUBLISHED Published: 2023-05-12T08:53:44.111Z Last Updated: 2024-12-06T23:04:24.695Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-2516 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-02-12T16:42:44.286Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: nilsteampassnet Products: nilsteampassnet/teampass Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/19470f0b-7094-4339-8d4a-4b5570b54716 - https://github.com/nilsteampassnet/teampass/commit/39b774cba118ca5383b0a51a71b1e7dea2761927
CVE ID: CVE-2023-2517 State: PUBLISHED Published: 2023-07-12T04:38:49.547Z Last Updated: 2024-10-23T14:45:26.249Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: xpeedstudio Products: Metform Elementor Contact Form Builder Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on the permalink_setup function. This makes it possible for unauthenticated attackers to change the permalink structure via a forged request granted they can trick a site
ible for unauthenticated attackers to change the permalink structure via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. While nonce verification is implemented, verification only takes place when a nonce is provided. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca66afc3-a749-4ddc-8e2f-959f65cebd45?source=cve - https://plugins.trac.wordpress.org/browser/metform/trunk/plugin.php#L544 - https://plugins.trac.wordpress.org/changeset/2907471/metform/trunk?contextall=1&old=2896914&old_path=%2Fmetform%2Ftrunk - https://plugins.trac
ordpress.org/changeset/2907471/metform/trunk?contextall=1&old=2896914&old_path=%2Fmetform%2Ftrunk - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2924362%40metform%2Ftrunk&old=2910040%40metform%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-2518 State: PUBLISHED Published: 2023-05-30T07:49:12.307Z Last Updated: 2025-01-10T21:06:05.726Z Vendors: Unknown Products: Easy Forms for Mailchimp Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ca120255-2c50-4906-97f3-ea660486db4c
CVE ID: CVE-2023-2519 State: PUBLISHED Published: 2023-05-04T16:31:03.917Z Last Updated: 2024-11-22T15:59:15.407Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Caton Products: CTP Relay Server Problem Types: CWE-89 Description: A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. VDB-228010 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228010 - https://vuldb.com/?ctiid.228010
CVE ID: CVE-2023-2520 State: PUBLISHED Published: 2023-05-04T16:31:04.913Z Last Updated: 2024-08-02T06:26:09.337Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Caton Products: Prime Problem Types: CWE-77 Description: A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049(202303031001) and classified as critical. This issue affects some unknown processing of the file cgi-bin/tools_ping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228011. NOTE: The vendor was contacted early about this disclosure but did no
ed identifier of this vulnerability is VDB-228011. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228011 - https://vuldb.com/?ctiid.228011 - https://www.youtube.com/watch?v=H1y7CXjJDmU
CVE ID: CVE-2023-2521 State: PUBLISHED Published: 2023-05-04T17:00:05.307Z Last Updated: 2025-01-29T16:36:31.622Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: NEXTU Products: NEXT-7004N Problem Types: CWE-79 Description: A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input <svg onload=alert(1337)> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-228012. NOTE: The vendor was contacted early about this disclosure but di
y. The identifier of this vulnerability is VDB-228012. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228012 - https://vuldb.com/?ctiid.228012
CVE ID: CVE-2023-2522 State: PUBLISHED Published: 2023-05-04T17:31:03.169Z Last Updated: 2024-08-02T06:26:09.671Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Chengdu Products: VEC40G Problem Types: CWE-78 Description: A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=access_detect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228013 was assig
be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228013 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228013 - https://vuldb.com/?ctiid.228013 - https://github.com/eckert-lcc/cve/blob/main/Flying%20fish%20star.md
CVE ID: CVE-2023-2523 State: PUBLISHED Published: 2023-05-04T18:00:05.694Z Last Updated: 2024-08-02T06:26:08.981Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Weaver Products: E-Office Problem Types: CWE-434 Description: A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228014 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early
ublic and may be used. VDB-228014 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.228014 - https://vuldb.com/?ctiid.228014 - https://github.com/RCEraser/cve/blob/main/Weaver.md
CVE ID: CVE-2023-2524 State: PUBLISHED Published: 2023-05-04T18:31:03.558Z Last Updated: 2025-01-29T17:56:58.702Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Control iD Products: RHiD Problem Types: CWE-425 Description: A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to direct request. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-228015. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
e but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.228015 - https://vuldb.com/?ctiid.228015
CVE ID: CVE-2023-2526 State: PUBLISHED Published: 2023-06-09T05:33:16.921Z Last Updated: 2024-12-20T23:42:55.675Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: supsysticcom Products: Easy Google Maps Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Easy Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.11.7. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to executes AJAX actions via a forged request granted they can trick a site administrator into performing an action such as clicking
AJAX actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4ea4ca00-185b-4f5d-9c5c-f81ba4edad05?source=cve - https://plugins.trac.wordpress.org/browser/google-maps-easy/trunk/classes/frame.php?rev=2777743#L246 - https://plugins.trac.wordpress.org/changeset/2916430/ - https://plugins.trac.wordpress.org/changeset/2916430/google-maps-easy/trunk/classes/frame.php?contextall=1
CVE ID: CVE-2023-2527 State: PUBLISHED Published: 2023-06-19T10:52:50.844Z Last Updated: 2024-12-11T20:52:18.593Z Vendors: Unknown Products: Integration for Contact Form 7 and Zoho CRM, Bigin Problem Types: CWE-89 SQL Injection Description: The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8051142a-4e55-4dc2-9cb1-1b724c67574f
CVE ID: CVE-2023-2528 State: PUBLISHED Published: 2023-05-16T23:35:31.193Z Last Updated: 2025-01-13T16:49:44.109Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: supsysticcom Products: Contact Form by Supsystic Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX actions via a forged request granted they can trick a site administrator into performing an action
ckers to execute AJAX actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c387b07-baf6-4c62-943e-4bd121160ceb?source=cve - https://plugins.trac.wordpress.org/browser/contact-form-by-supsystic/trunk/classes/frame.php?rev=2777737#L297 - https://plugins.trac.wordpress.org/browser/contact-form-by-supsystic/trunk/classes/frame.php?rev=2912584#L230
CVE ID: CVE-2023-2529 State: PUBLISHED Published: 2023-07-10T12:40:43.491Z Last Updated: 2024-08-02T06:26:09.726Z Vendors: Unknown Products: Enable SVG Uploads Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Enable SVG Uploads WordPress plugin through 2.1.5 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4ac03907-2373-48f0-bca1-8f7073c06b18
CVE ID: CVE-2023-2530 State: PUBLISHED Published: 2023-06-07T00:00:00.000Z Last Updated: 2025-08-26T14:17:55.192Z Vendors: Puppet Products: Puppet Enterprise Problem Types: CWE-284 Improper Access Control Description: A privilege escalation allowing remote code execution was discovered in the orchestration service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.puppet.com/security/cve/cve-2023-2530-remote-code-execution-orchestrator
CVE ID: CVE-2023-2531 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-02-12T16:30:22.503Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: azuracast Products: azuracast/azuracast Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/20463eb2-0f9d-4ea3-a2c8-93f80e7aca02 - https://github.com/azuracast/azuracast/commit/bdb23594ad3e0c47c8568ce028a7c244a406cf9d
CVE ID: CVE-2023-2533 State: PUBLISHED Published: 2023-06-20T14:45:14.102Z Last Updated: 2025-10-21T23:05:45.534Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: PaperCut Products: PaperCut NG/MF Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially le
typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/arcangel/ - https://www.papercut.com/kb/Main/SecurityBulletinJune2023
CVE ID: CVE-2023-2534 State: PUBLISHED Published: 2023-05-08T07:29:49.293Z Last Updated: 2025-01-29T15:54:37.041Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: OTRS AG Products: OTRS Problem Types: CWE-285 Description: Improper Authorization vulnerability in OTRS AG OTRS 8 (Websocket API backend) allows any as Agent authenticated attacker to track user behaviour and to gain live insight into overall system usage. User IDs can easily be correlated with real names e. g. via ticket histories by any user. (Fuzzing for garnering other adjacent user/sensitive data). Subscribing to all possible push events could also lead to performance implications on the server s
ser/sensitive data). Subscribing to all possible push events could also lead to performance implications on the server side, depending on the size of the installation and the number of active users. (Flooding)This issue affects OTRS: from 8.0.X before 8.0.32. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2023-03/
CVE ID: CVE-2023-2535 State: REJECTED Published: 2023-05-05T07:22:47.045Z Last Updated: 2023-05-05T08:21:05.943Z Description: No description available.
CVE ID: CVE-2023-2536 State: REJECTED Published: 2023-05-05T08:12:36.131Z Last Updated: 2023-05-05T08:30:43.827Z Description: No description available.
CVE ID: CVE-2023-2537 State: REJECTED Published: 2023-05-05T08:19:47.490Z Last Updated: 2023-05-05T08:30:58.647Z Description: No description available.
CVE ID: CVE-2023-2538 State: PUBLISHED Published: 2023-07-05T12:11:53.397Z Last Updated: 2024-10-24T19:21:16.864Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tyan Products: s5552_bmc Problem Types: CWE-552 Description: A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform Man-in-the-Middle (MitM) attacks against victims that access the web interface through HTTPS. Additional Analyst Notes: - CVE Program Container: - CISA ADP
inst victims that access the web interface through HTTPS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-2538/
CVE ID: CVE-2023-2539 State: REJECTED Published: 2023-05-05T08:25:33.868Z Last Updated: 2023-05-05T08:26:16.959Z Description: No description available.
CVE ID: CVE-2023-2540 State: REJECTED Published: 2023-05-05T08:28:43.248Z Last Updated: 2023-05-05T08:30:29.547Z Description: No description available.