Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecuted with the privilege of the user invoking the installer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squirrel/Squirrel.Windows/pull/1807 - https://github.com/Squirrel/Squirrel.Windows - https://jvn.jp/en/jp/JVN29902403/index.html
CVE ID: CVE-2022-46331 State: PUBLISHED Published: 2023-01-17T23:49:42.351Z Last Updated: 2025-01-16T22:00:49.355Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: GE Digital Products: Proficy Historian Problem Types: CWE-284 Description: An unauthorized user could possibly delete any file on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01 - https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01
CVE ID: CVE-2022-46332 State: PUBLISHED Published: 2022-12-06T19:52:02.111Z Last Updated: 2025-04-23T16:11:39.031Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: proofpoint Products: enterprise_protection Problem Types: CWE-79 Description: The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022
m Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0002
CVE ID: CVE-2022-46333 State: PUBLISHED Published: 2022-12-06T19:52:36.587Z Last Updated: 2025-04-23T16:11:07.699Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: proofpoint Products: enterprise_protection Problem Types: CWE-94 Description: The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0003
CVE ID: CVE-2022-46334 State: PUBLISHED Published: 2022-12-21T20:05:38.584Z Last Updated: 2025-04-15T18:37:56.365Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Proofpoint Products: enterprise_protection Problem Types: CWE-269 Description: Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0004
CVE ID: CVE-2022-46335 State: REJECTED Published: N/A Last Updated: 2023-01-05T00:00:00 Description: No description available.
CVE ID: CVE-2022-46336 State: REJECTED Published: N/A Last Updated: 2023-01-05T00:00:00 Description: No description available.
CVE ID: CVE-2022-46337 State: PUBLISHED Published: 2023-11-20T08:49:38.619Z Last Updated: 2025-06-10T13:44:34.288Z Vendors: Apache Software Foundation Products: Apache Derby Problem Types: LDAP Injection Description: A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was visible to and executable by the account which booted the Derby server. In LDAP-protected databases which weren't also protected by SQL GRANT/REVOKE authorization, this vulnerability cou
rver. In LDAP-protected databases which weren't also protected by SQL GRANT/REVOKE authorization, this vulnerability could also let an attacker view and corrupt sensitive data and run sensitive database functions and procedures. Mitigation: Users should upgrade to Java 21 and Derby 10.17.1.0. Alternatively, users who wish to remain on older Java versions should build their own Derby distribution from one of the release families to which the fix was backported: 10.16, 10.15, and 10.14. Those are the releases which correspond, respectively, with Java LTS versions 17, 11, and 8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/th
8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/q23kvvtoohgzwybxpwozmvvk17rp0td3
CVE ID: CVE-2022-46338 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T18:53:54.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MatMoul/g810-led/pull/297 - https://bugs.debian.org/1024998 - https://lists.debian.org/debian-lts-announce/2022/12/msg00002.html
CVE ID: CVE-2022-46340 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:54:37.848Z Vendors: n/a Products: xorg-x11-server Problem Types: stack overflow Description: A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
ution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-46340 - https://bugzilla.redhat.com/show_bug.cgi?id=2151755 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40
5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30
CVE ID: CVE-2022-46341 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:53:42.643Z Vendors: n/a Products: xorg-x11-server Problem Types: out-of-bounds access Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2151756 - h
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2151756 - https://access.redhat.com/security/cve/CVE-2022-46341 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30
CVE ID: CVE-2022-46342 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:21:21.802Z Vendors: n/a Products: xorg-x11-server Problem Types: use-after-free Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2151757 - https://access.redhat.com/security/cve/CVE-2022-46342 - https://lists.fedoraproject.org/archives/list/package-announce
- https://access.redhat.com/security/cve/CVE-2022-46342 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30
CVE ID: CVE-2022-46343 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-04-22T15:14:18.715Z Vendors: n/a Products: xorg-x11-server Problem Types: use-after-free Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-46343 - https://bugzilla.redhat.com/sh
A ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2022-46343 - https://bugzilla.redhat.com/show_bug.cgi?id=2151758 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30
CVE ID: CVE-2022-46344 State: PUBLISHED Published: 2022-12-14T00:00:00.000Z Last Updated: 2025-02-13T16:33:49.230Z Vendors: n/a Products: xorg-x11-server Problem Types: out-of-bounds access Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2022-
sions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2022-46344 - https://bugzilla.redhat.com/show_bug.cgi?id=2151760 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/ - https://www.debian.org/security/2022/dsa-5304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30 - http://www.openwall.com/li
.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/ - https://security.gentoo.org/glsa/202305-30 - http://www.openwall.com/lists/oss-security/2023/12/13/1
CVE ID: CVE-2022-46345 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2024-08-03T14:31:46.241Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0U
lid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19070) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2022-46346 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2024-08-03T14:31:45.864Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0U
lid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19071) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2022-46347 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:42:43.444Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V2
), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19079) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2022-46348 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:42:35.733Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V2
), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19383) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2022-46349 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:42:27.034Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V33.1, Parasolid V34.0, Parasolid V34.1, Parasolid V35.0, Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V2
), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19384) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2022-46350 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:03:40.510Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-80 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting user
) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
CVE ID: CVE-2022-46351 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T03:00:30.476Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-400 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected
R) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
CVE ID: CVE-2022-46352 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T02:57:18.993Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-400 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected
R) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
CVE ID: CVE-2022-46353 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T02:55:31.276Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-330 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. T
R) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
CVE ID: CVE-2022-46354 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:40:48.175Z Vendors: Siemens Products: SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) Problem Types: CWE-284 Description: A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow a
R) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf