Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13895 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:01.593Z Description: No description available.
CVE ID: CVE-2017-13896 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:01.971Z Description: No description available.
CVE ID: CVE-2017-13897 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:02.354Z Description: No description available.
CVE ID: CVE-2017-13898 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:02.738Z Description: No description available.
CVE ID: CVE-2017-13899 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:03.117Z Description: No description available.
CVE ID: CVE-2017-13900 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:03.485Z Description: No description available.
CVE ID: CVE-2017-13901 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:03.862Z Description: No description available.
CVE ID: CVE-2017-13902 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:04.227Z Description: No description available.
CVE ID: CVE-2017-13903 State: PUBLISHED Published: 2017-12-25T21:00:00 Last Updated: 2024-08-05T19:13:41.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by use of an Apple Watch to obtain an encryption key and unlock a door. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208359 - https://www.engadget.com/2017/12/21/apple-ignored-a-major-homekit-security-flaw-fo
https://support.apple.com/HT208359 - https://www.engadget.com/2017/12/21/apple-ignored-a-major-homekit-security-flaw-for-six-weeks/ - http://www.securitytracker.com/id/1040008 - http://www.securityfocus.com/bid/102182 - https://support.apple.com/HT208357
CVE ID: CVE-2017-13904 State: PUBLISHED Published: 2018-04-03T00:00:00 Last Updated: 2024-08-05T19:13:41.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208331 - https://support.apple.com/HT208327 - https://support.apple.com/HT208325
erences: - https://support.apple.com/HT208331 - https://support.apple.com/HT208327 - https://support.apple.com/HT208325 - https://support.apple.com/HT208334 - http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html
CVE ID: CVE-2017-13905 State: PUBLISHED Published: 2021-12-23T19:48:22 Last Updated: 2024-08-05T19:13:41.368Z Vendors: Apple Products: watchOS, tvOS, macOS Problem Types: An application may be able to gain elevated privileges Description: A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208325 - https://support.apple.com/en-us/HT208327 - https://support.apple.com/en-us/HT208
ps://support.apple.com/en-us/HT208325 - https://support.apple.com/en-us/HT208327 - https://support.apple.com/en-us/HT208334 - https://support.apple.com/en-us/HT208331
CVE ID: CVE-2017-13906 State: PUBLISHED Published: 2021-12-23T19:48:25 Last Updated: 2024-08-05T19:13:41.509Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to elevate privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208221 - https://support.apple.com/en-us/HT208144
CVE ID: CVE-2017-13907 State: PUBLISHED Published: 2021-12-23T19:48:25 Last Updated: 2024-08-05T19:13:41.546Z Vendors: Apple Products: macOS Problem Types: The screen lock may unexpectedly remain unlocked Description: A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208221
CVE ID: CVE-2017-13908 State: PUBLISHED Published: 2021-12-23T19:48:30 Last Updated: 2024-08-05T19:13:41.641Z Vendors: Apple Products: macOS Problem Types: A local attacker may be able to execute non-executable text files via an SMB share Description: An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A local attacker may be able to execute non-executable text files via an SMB share. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208221 - https://support.apple.com/en-
t Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208221 - https://support.apple.com/en-us/HT208144
CVE ID: CVE-2017-13909 State: PUBLISHED Published: 2021-12-23T19:48:26 Last Updated: 2024-08-05T19:13:41.425Z Vendors: Apple Products: macOS Problem Types: A local attacker may gain access to iCloud authentication tokens Description: An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13. A local attacker may gain access to iCloud authentication tokens. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208144
CVE ID: CVE-2017-13910 State: PUBLISHED Published: 2021-12-23T19:48:27 Last Updated: 2024-08-05T19:13:41.370Z Vendors: Apple Products: macOS Problem Types: An application may be able to access restricted files Description: An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT208144
CVE ID: CVE-2017-13911 State: PUBLISHED Published: 2019-04-03T17:43:20 Last Updated: 2024-08-05T19:13:41.457Z Vendors: n/a Products: OS X, macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT208331 - https://support.apple.com/kb/HT208692
CVE ID: CVE-2017-13912 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:04.604Z Description: No description available.
CVE ID: CVE-2017-13913 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:04.978Z Description: No description available.
CVE ID: CVE-2017-13914 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:05.382Z Description: No description available.
CVE ID: CVE-2017-13915 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:05.771Z Description: No description available.
CVE ID: CVE-2017-13916 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:06.303Z Description: No description available.
CVE ID: CVE-2017-13917 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:06.677Z Description: No description available.
CVE ID: CVE-2017-13918 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:07.041Z Description: No description available.
CVE ID: CVE-2017-13919 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:07.402Z Description: No description available.
CVE ID: CVE-2017-13920 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:07.770Z Description: No description available.
CVE ID: CVE-2017-13921 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:08.177Z Description: No description available.
CVE ID: CVE-2017-13922 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:08.553Z Description: No description available.
CVE ID: CVE-2017-13923 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:08.921Z Description: No description available.
CVE ID: CVE-2017-13924 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:09.287Z Description: No description available.
CVE ID: CVE-2017-13925 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:09.675Z Description: No description available.
CVE ID: CVE-2017-13926 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:10.047Z Description: No description available.
CVE ID: CVE-2017-13927 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:10.416Z Description: No description available.
CVE ID: CVE-2017-13928 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:10.821Z Description: No description available.
CVE ID: CVE-2017-13929 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:11.182Z Description: No description available.
CVE ID: CVE-2017-13930 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:11.543Z Description: No description available.
CVE ID: CVE-2017-13931 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:11.905Z Description: No description available.
CVE ID: CVE-2017-13932 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:12.274Z Description: No description available.
CVE ID: CVE-2017-13933 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:12.646Z Description: No description available.
CVE ID: CVE-2017-13934 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:13.025Z Description: No description available.
CVE ID: CVE-2017-13935 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:13.410Z Description: No description available.
CVE ID: CVE-2017-13936 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:13.865Z Description: No description available.
CVE ID: CVE-2017-13937 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:14.250Z Description: No description available.
CVE ID: CVE-2017-13938 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:14.641Z Description: No description available.
CVE ID: CVE-2017-13939 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:15.092Z Description: No description available.
CVE ID: CVE-2017-13940 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:15.564Z Description: No description available.
CVE ID: CVE-2017-13941 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:15.935Z Description: No description available.
CVE ID: CVE-2017-13942 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:16.307Z Description: No description available.
CVE ID: CVE-2017-13943 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:16.675Z Description: No description available.
CVE ID: CVE-2017-13944 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:17.055Z Description: No description available.
CVE ID: CVE-2017-13945 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:17.428Z Description: No description available.
CVE ID: CVE-2017-13946 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:17.794Z Description: No description available.
CVE ID: CVE-2017-13947 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:18.166Z Description: No description available.
CVE ID: CVE-2017-13948 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:18.538Z Description: No description available.
CVE ID: CVE-2017-13949 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:18.894Z Description: No description available.
CVE ID: CVE-2017-13950 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:19.256Z Description: No description available.
CVE ID: CVE-2017-13951 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:19.619Z Description: No description available.
CVE ID: CVE-2017-13952 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:19.972Z Description: No description available.
CVE ID: CVE-2017-13953 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:20.335Z Description: No description available.
CVE ID: CVE-2017-13954 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:20.704Z Description: No description available.
CVE ID: CVE-2017-13955 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:21.081Z Description: No description available.
CVE ID: CVE-2017-13956 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:21.449Z Description: No description available.
CVE ID: CVE-2017-13957 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:21.821Z Description: No description available.
CVE ID: CVE-2017-13958 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:22.229Z Description: No description available.
CVE ID: CVE-2017-13959 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:22.594Z Description: No description available.
CVE ID: CVE-2017-13960 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:22.948Z Description: No description available.
CVE ID: CVE-2017-13961 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:23.319Z Description: No description available.
CVE ID: CVE-2017-13962 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:23.682Z Description: No description available.
CVE ID: CVE-2017-13963 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:24.057Z Description: No description available.
CVE ID: CVE-2017-13964 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:24.410Z Description: No description available.
CVE ID: CVE-2017-13965 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:24.769Z Description: No description available.
CVE ID: CVE-2017-13966 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:25.151Z Description: No description available.
CVE ID: CVE-2017-13967 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:25.514Z Description: No description available.
CVE ID: CVE-2017-13968 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:25.869Z Description: No description available.
CVE ID: CVE-2017-13969 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:26.232Z Description: No description available.
CVE ID: CVE-2017-13970 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:26.589Z Description: No description available.
CVE ID: CVE-2017-13971 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:26.955Z Description: No description available.
CVE ID: CVE-2017-13972 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:27.325Z Description: No description available.
CVE ID: CVE-2017-13973 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:27.684Z Description: No description available.
CVE ID: CVE-2017-13974 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:28.043Z Description: No description available.
CVE ID: CVE-2017-13975 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:28.402Z Description: No description available.
CVE ID: CVE-2017-13976 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:28.799Z Description: No description available.
CVE ID: CVE-2017-13977 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:29.166Z Description: No description available.
CVE ID: CVE-2017-13978 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:29.523Z Description: No description available.
CVE ID: CVE-2017-13979 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:29.890Z Description: No description available.
CVE ID: CVE-2017-13980 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:30.252Z Description: No description available.
CVE ID: CVE-2017-13981 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:41:30.638Z Description: No description available.
CVE ID: CVE-2017-13982 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02942065 - https://www.auscert.org.au/bulletins/52154 - http://www.zerodayinitiative.com/advisories/ZDI-17-719/ - http://www.securityfocus.com/bid/101199
CVE ID: CVE-2017-13983 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02942065 - https://www.auscert.org.au/bulletins/52154 - http://www.zerodayinitiative.com/advisories/ZDI-17-722/
CVE ID: CVE-2017-13984 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02942065 - http://www.zerodayinitiative.com/advisories/ZDI-17-720/ - https://www.auscert.org.au/bulletins/52154
CVE ID: CVE-2017-13985 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-17-721/ - https://softwaresupport.hpe.com/km/KM02942065 - https://www.auscert.org.au/bulletins/52154
CVE ID: CVE-2017-13986 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows for unintended information when a specific URL is sent to the system. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13987 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13988 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13989 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to retrieve or modify storage information. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13990 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat application server version. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13991 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:13:41.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of product license features. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02944672 - http://www.securityfocus.com/bid/100935
CVE ID: CVE-2017-13992 State: PUBLISHED Published: 2017-10-05T21:00:00 Last Updated: 2024-08-05T19:13:41.672Z Vendors: n/a Products: LOYTEC LVIS-3ME Problem Types: CWE-331 Description: An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 - http://www.securityfocus.com/bid/100847
CVE ID: CVE-2017-13993 State: PUBLISHED Published: 2017-10-04T07:00:00 Last Updated: 2024-08-05T19:13:41.616Z Vendors: n/a Products: i-SENS, Inc. SmartLog Diabetes Management Software Problem Types: CWE-428 Description: An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. This vulnerability does not affect the connected blood glucose monitor
cker could execute arbitrary code on the system. This vulnerability does not affect the connected blood glucose monitor and would not impact delivery of therapy to the patient. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01 - http://www.securityfocus.com/bid/100659