Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12456 State: PUBLISHED Published: 2020-08-26T18:07:29 Last Updated: 2024-08-04T11:56:52.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/suppo
: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0006
CVE ID: CVE-2020-12457 State: PUBLISHED Published: 2020-08-21T13:06:44 Last Updated: 2024-08-04T11:56:51.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for TLS 1.3. If an attacker sends ChangeCipherSpec messages in a crafted way involving more than one in a row, the server becomes stuck in the ProcessReply() loop, i.e., a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/2927 - https://github.com/wolfSSL/wolfssl/releases/tag/v4.5.0-stable
CVE ID: CVE-2020-12458 State: PUBLISHED Published: 2020-04-29T15:57:05 Last Updated: 2024-08-04T11:56:52.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/issues/8283 - https://bugzilla.redhat.com/show_bug.cgi?id=1827765 - https://access.redhat.com/security/cve/CVE-2020-12458 - https://lists.fedoraproject.
edhat.com/show_bug.cgi?id=1827765 - https://access.redhat.com/security/cve/CVE-2020-12458 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A/ - https://security.netapp.com/advisory/ntap-20200518-0001/
CVE ID: CVE-2020-12459 State: PUBLISHED Published: 2020-04-29T15:56:56 Last Updated: 2024-08-04T11:56:52.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/issues/8283 - https://access.redhat.com/security/cve/CVE-2020-12459 - https://bugzilla.redhat.com/show_bug.cgi?id=1829724 - https://src.fedoraproject.org/rpms/grafana/c/fab93d67363eb0a9678d9faf160cc88237f26277 - https://lists.f
cgi?id=1829724 - https://src.fedoraproject.org/rpms/grafana/c/fab93d67363eb0a9678d9faf160cc88237f26277 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A/ - https://security.netapp.com/advisory/ntap-20200518-0004/
CVE ID: CVE-2020-12460 State: PUBLISHED Published: 2020-07-27T22:52:35 Last Updated: 2024-08-04T11:56:52.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/opendmarc/ - https://github.com/trusteddomainproject/OpenDMARC/iss
ainer: References: - https://sourceforge.net/projects/opendmarc/ - https://github.com/trusteddomainproject/OpenDMARC/issues/64 - https://security.gentoo.org/glsa/202011-02 - https://lists.debian.org/debian-lts-announce/2021/04/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JHDKMCZGE3W4XBP76NLI2Q7IOZHXLD4A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KBOGOQOK3TIWWJV66MW5YWNRJAFFYGR5/
CVE ID: CVE-2020-12461 State: PUBLISHED Published: 2020-04-29T16:14:26 Last Updated: 2024-08-04T11:56:52.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/lq7nA3ISSoeiGjiHVn5CoA - https://github.com/php-fusion/PHP-Fusion/issues/2308 - https://github.com/php-fusion/PHP-Fu
.io/lq7nA3ISSoeiGjiHVn5CoA - https://github.com/php-fusion/PHP-Fusion/issues/2308 - https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2 - https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d22487723266c898b98e6be10754e03d - https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822
CVE ID: CVE-2020-12462 State: PUBLISHED Published: 2020-04-29T16:23:53 Last Updated: 2024-08-04T11:56:52.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers
CVE ID: CVE-2020-12463 State: PUBLISHED Published: 2020-05-05T21:18:38 Last Updated: 2024-08-04T11:56:52.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater
CVE ID: CVE-2020-12464 State: PUBLISHED Published: 2020-04-29T17:59:51 Last Updated: 2024-08-04T11:56:52.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/patch/11463781/ - https://lkml.org/lkml/2020/3/23/52 - https://github.com/torvalds/linux/commit/056ad39ee9253873522f6469c3364964a322912b - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b - https://cdn.k
.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee9253873522f6469c3364964a322912b - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8 - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - https://www.debian.org/security/2020/dsa-4699 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://usn.ubuntu.com/4388-1/ - https://usn.ubuntu.com/4389-1/ - https://usn.ubuntu.com/43
unce/2020-06/msg00022.html - https://usn.ubuntu.com/4388-1/ - https://usn.ubuntu.com/4389-1/ - https://usn.ubuntu.com/4387-1/ - https://usn.ubuntu.com/4390-1/ - https://usn.ubuntu.com/4391-1/
CVE ID: CVE-2020-12465 State: PUBLISHED Published: 2020-04-29T18:52:38 Last Updated: 2024-08-04T11:56:52.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/b102f0c522cf668c8382c56a4f771b37d011cda2 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b102f0c522cf668c8382c56a4f771b37d011cda2 - https://cdn.kernel.org/p
/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b102f0c522cf668c8382c56a4f771b37d011cda2 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.10 - https://security.netapp.com/advisory/ntap-20200608-0001/
CVE ID: CVE-2020-12467 State: PUBLISHED Published: 2020-04-29T19:58:55 Last Updated: 2024-08-04T11:56:52.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation
CVE ID: CVE-2020-12468 State: PUBLISHED Published: 2020-04-29T19:58:47 Last Updated: 2024-08-04T11:56:52.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection
CVE ID: CVE-2020-12469 State: PUBLISHED Published: 2020-04-29T19:58:37 Last Updated: 2024-08-04T11:56:52.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection
CVE ID: CVE-2020-12470 State: PUBLISHED Published: 2020-04-29T19:58:23 Last Updated: 2024-08-04T11:56:52.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20Template%20Modification
CVE ID: CVE-2020-12471 State: PUBLISHED Published: 2020-04-29T19:58:15 Last Updated: 2024-08-04T11:56:52.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Remote%20Code%20Execution%20via%20Insecure%20Deserialization
CVE ID: CVE-2020-12472 State: PUBLISHED Published: 2020-04-29T19:58:06 Last Updated: 2024-08-04T11:56:52.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Multiple%20Cross-Site-Scripting
CVE ID: CVE-2020-12473 State: PUBLISHED Published: 2020-04-29T19:57:55 Last Updated: 2024-08-04T11:56:52.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20ConvertVideo
CVE ID: CVE-2020-12474 State: PUBLISHED Published: 2020-05-01T13:45:28 Last Updated: 2024-08-04T11:56:52.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram:CVE-2020-12474
CVE ID: CVE-2020-12475 State: PUBLISHED Published: 2020-05-04T13:36:04 Last Updated: 2024-08-04T11:56:52.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar. Additional Analyst Notes: - CVE Program Container: References: - https://sovietw0rm.wordpress.com/2020/04/29/tp-link-omada-controller-directory-traversal-vulnerability/
CVE ID: CVE-2020-12477 State: PUBLISHED Published: 2020-04-29T21:49:33 Last Updated: 2024-08-04T11:56:52.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/issues/2761
CVE ID: CVE-2020-12478 State: PUBLISHED Published: 2020-04-29T21:49:25 Last Updated: 2024-08-04T11:56:52.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/issues/2764
CVE ID: CVE-2020-12479 State: PUBLISHED Published: 2020-04-29T21:49:16 Last Updated: 2024-08-04T11:56:52.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/issues/2762
CVE ID: CVE-2020-12480 State: PUBLISHED Published: 2020-08-17T20:45:28 Last Updated: 2024-08-04T11:56:52.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed. Additional Analyst Notes: - CVE Program Container: References: - https://www.playframework.com/security/vulnerability - https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass
CVE ID: CVE-2020-12483 State: PUBLISHED Published: 2021-03-23T16:15:00.995061Z Last Updated: 2024-09-16T22:56:44.301Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: vivo Products: appstore Problem Types: CWE-601 Description: The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.vivo.com/en/support/security-advisory-detail?id=1
CVE ID: CVE-2020-12484 State: PUBLISHED Published: 2024-12-17T02:36:45.758Z Last Updated: 2024-12-17T14:54:21.557Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: vivo Products: Wifi Problem Types: CWE-306 Description: When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=3
CVE ID: CVE-2020-12485 State: PUBLISHED Published: 2020-11-10T15:31:38.958758Z Last Updated: 2024-09-16T17:58:52.888Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: vivo Products: The frame touch module Problem Types: CWE-125 Description: The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.vivo.com/en/support/security-advisory-detail?id=2
CVE ID: CVE-2020-12487 State: PUBLISHED Published: 2024-12-17T02:53:22.309Z Last Updated: 2024-12-17T14:44:40.238Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: vivo Products: ABE Problem Types: CWE-20 Description: Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=4
CVE ID: CVE-2020-12488 State: PUBLISHED Published: 2021-11-10T15:49:58.016162Z Last Updated: 2024-09-16T22:25:02.702Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: vivo Products: Jovi Smart Scene Problem Types: CWE-284 Description: The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.vivo.com/en/support/security-advisory-detail?id=5
CVE ID: CVE-2020-12491 State: PUBLISHED Published: 2024-11-25T10:08:14.791Z Last Updated: 2024-11-25T17:03:03.193Z Vendors: vivo Products: Framework Problem Types: CWE-306 Description: Improper control of framework service permissions with possibility of some sensitive device information leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=11
CVE ID: CVE-2020-12492 State: PUBLISHED Published: 2024-11-25T10:11:30.761Z Last Updated: 2024-11-25T17:02:32.200Z Vendors: vivo Products: Framework Problem Types: CWE-306 Description: Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=12
CVE ID: CVE-2020-12493 State: PUBLISHED Published: 2020-05-29T17:27:54.803785Z Last Updated: 2024-09-17T01:16:45.556Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SWARCO Products: CPU LS4000 Problem Types: CWE-284 Description: An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2020-016
CVE ID: CVE-2020-12494 State: PUBLISHED Published: 2020-06-16T13:28:38 Last Updated: 2024-08-04T11:56:52.090Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Beckhoff Products: TwinCat Driver for Intel 8254x (Tcl8254x.sys), TwinCat Driver for Intel 8255x (Tcl8255x.sys) Problem Types: CWE-459 Description: Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory co
gh the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames. By this method, memory content is disclosed, however, an attacker can hardly control which memory content is affected. For example, the disclosure can be provoked with small sized ICMP echo requests sent to the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-019
CVE ID: CVE-2020-12495 State: PUBLISHED Published: 2020-11-19T17:07:17.082788Z Last Updated: 2024-09-16T18:19:18.832Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Endress+Hauser Products: RSG35 - Ecograph T, ORSG35 - Ecograph T Neutral/Private Label Problem Types: CWE-269 Description: Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that u
es have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-021
CVE ID: CVE-2020-12496 State: PUBLISHED Published: 2020-11-19T17:07:20.957900Z Last Updated: 2024-09-16T23:50:39.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Endress+Hauser Products: RSG35 - Ecograph T, ORSG35 - Ecograph T Neutral/Private Label, RSG45 - Memograph M, ORSG45 - Memograph M Neutral/Private Label Problem Types: CWE-200 Description: Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the serv
ve information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-control matrix on the server-side. It was found that a user with low rights can get information from endpoints that should not be available to this user. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-022