Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6968 State: PUBLISHED Published: 2020-02-20T20:50:43 Last Updated: 2024-08-04T09:18:02.513Z Vendors: Honeywell Products: INNCOM INNControl 3 Problem Types: CWE-269 Description: Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-049-01
CVE ID: CVE-2020-6969 State: PUBLISHED Published: 2020-02-05T15:09:30 Last Updated: 2024-08-04T09:18:02.388Z Vendors: n/a Products: C-More Touch Panels EA9 series Problem Types: CWE-522 Description: It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-035-01
CVE ID: CVE-2020-6970 State: PUBLISHED Published: 2020-02-19T20:19:55 Last Updated: 2024-08-04T09:18:02.389Z Vendors: Emerson Products: OpenEnterprise SCADA Server, OpenEnterprise Problem Types: CWE-122 Description: A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-049-02
CVE ID: CVE-2020-6971 State: PUBLISHED Published: 2020-03-05T20:02:58 Last Updated: 2024-08-04T09:18:02.518Z Vendors: n/a Products: Emerson ValveLink Problem Types: CWE-284 Description: In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-063-01
CVE ID: CVE-2020-6972 State: PUBLISHED Published: 2020-03-24T16:38:57 Last Updated: 2024-08-04T09:18:02.247Z Vendors: Honeywell Products: Notifier Web Server (NWS) Version 3.50 and earlier Problem Types: CWE-294 Description: In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-051-03
CVE ID: CVE-2020-6973 State: PUBLISHED Published: 2020-02-12T23:01:19 Last Updated: 2024-08-04T09:18:02.479Z Vendors: n/a Products: Digi International ConnectPort LTS 32 MEI Problem Types: CWE-79 Description: Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-042-13
CVE ID: CVE-2020-6974 State: PUBLISHED Published: 2020-04-07T17:06:02 Last Updated: 2024-08-04T09:18:02.542Z Vendors: n/a Products: Honeywell Notifier Web Server (NWS) Problem Types: CWE-22 Description: Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-051-03
CVE ID: CVE-2020-6975 State: PUBLISHED Published: 2020-02-12T23:00:00 Last Updated: 2024-08-04T09:18:02.455Z Vendors: n/a Products: Digi International ConnectPort LTS 32 MEI Problem Types: CWE-434 Description: Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-042-13
CVE ID: CVE-2020-6976 State: PUBLISHED Published: 2020-03-18T13:01:23 Last Updated: 2024-08-04T09:18:02.481Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-125 Description: Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-077-01
CVE ID: CVE-2020-6977 State: PUBLISHED Published: 2020-02-20T20:45:29 Last Updated: 2024-08-04T09:18:03.015Z Vendors: GE Products: GE Ultrasound Products Problem Types: CWE-693 Description: A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all ve
Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5 Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-049-02
CVE ID: CVE-2020-6978 State: PUBLISHED Published: 2020-03-24T20:09:17 Last Updated: 2024-08-04T09:18:03.026Z Vendors: n/a Products: Honeywell WIN-PAK 4.7.2, Web and prior versions Problem Types: CWE-477 Description: In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-05
CVE ID: CVE-2020-6979 State: PUBLISHED Published: 2020-03-24T20:21:41 Last Updated: 2024-08-04T09:18:02.445Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-321 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-6980 State: PUBLISHED Published: 2020-03-16T15:36:51 Last Updated: 2024-08-04T09:18:02.979Z Vendors: n/a Products: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Problem Types: CWE-312 Description: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authen
ata is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-070-06
CVE ID: CVE-2020-6981 State: PUBLISHED Published: 2020-03-24T20:23:48 Last Updated: 2024-08-04T09:18:03.042Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-798 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-6982 State: PUBLISHED Published: 2020-03-24T20:04:38 Last Updated: 2024-08-04T09:18:03.074Z Vendors: n/a Products: Honeywell WIN-PAK 4.7.2, Web and prior versions Problem Types: CWE-644 Description: In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-05
CVE ID: CVE-2020-6983 State: PUBLISHED Published: 2020-03-24T18:57:14 Last Updated: 2024-08-04T09:18:02.537Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-321 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6984 State: PUBLISHED Published: 2020-03-16T15:41:13 Last Updated: 2024-08-04T09:18:02.527Z Vendors: n/a Products: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Problem Types: CWE-327 Description: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable. Additional Analyst Notes: - CVE Program Container: References: - https://www.u
e password in MicroLogix is discoverable. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-070-06
CVE ID: CVE-2020-6985 State: PUBLISHED Published: 2020-03-24T19:11:40 Last Updated: 2024-08-04T09:18:02.996Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-798 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6986 State: PUBLISHED Published: 2020-03-05T20:05:05 Last Updated: 2024-08-04T09:18:02.467Z Vendors: n/a Products: Omron PLC CJ Series Problem Types: CWE-400 Description: In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-063-03
CVE ID: CVE-2020-6987 State: PUBLISHED Published: 2020-03-24T19:00:16 Last Updated: 2024-08-04T09:18:02.493Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-327 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6988 State: PUBLISHED Published: 2020-03-16T15:38:36 Last Updated: 2024-08-04T09:18:02.514Z Vendors: n/a Products: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Problem Types: CWE-603 Description: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client
uest from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-070-06
CVE ID: CVE-2020-6989 State: PUBLISHED Published: 2020-03-24T18:54:19 Last Updated: 2024-08-04T09:18:02.547Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-121 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6990 State: PUBLISHED Published: 2020-03-16T15:39:45 Last Updated: 2024-08-04T09:18:02.522Z Vendors: n/a Products: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Problem Types: CWE-321 Description: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use
e account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-070-06
CVE ID: CVE-2020-6991 State: PUBLISHED Published: 2020-03-24T20:29:40 Last Updated: 2024-08-04T09:18:02.508Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-521 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-6992 State: PUBLISHED Published: 2020-04-15T16:39:49 Last Updated: 2024-08-04T09:18:02.457Z Vendors: n/a Products: GE Digital CIMPLICITY Problem Types: CWE-269 Description: A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an attacker has access to an authenticated session. GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to
2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-02
CVE ID: CVE-2020-6993 State: PUBLISHED Published: 2020-03-24T19:19:09 Last Updated: 2024-08-04T09:18:02.970Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-200 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6994 State: PUBLISHED Published: 2020-04-03T18:04:59 Last Updated: 2024-08-04T09:18:02.906Z Vendors: Hirschmann Automation and Control GmbH, a division of Belden Inc. Products: HiOS for the following devices RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED, HiSecOS for device EAGLE20/30 Problem Types: CWE-12 Description: A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are
y crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-091-01
CVE ID: CVE-2020-6995 State: PUBLISHED Published: 2020-03-24T19:16:16 Last Updated: 2024-08-04T09:18:03.026Z Vendors: n/a Products: Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Problem Types: CWE-521 Description: In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-03
CVE ID: CVE-2020-6996 State: PUBLISHED Published: 2020-04-15T18:46:30 Last Updated: 2024-08-04T09:18:02.666Z Vendors: n/a Products: Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01 Problem Types: CWE-121 Description: Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Refer
. Authentication is not required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-105-02
CVE ID: CVE-2020-6997 State: PUBLISHED Published: 2020-03-24T20:31:59 Last Updated: 2024-08-04T09:18:02.579Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-319 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-6998 State: PUBLISHED Published: 2022-07-27T20:18:00.000Z Last Updated: 2025-04-17T15:51:02.651Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Rockwell Automation Products: Armor Compact GuardLogix 5370 controllers, Armor GuardLogix Safety Controllers, CompactLogix 5370 L1 controllers, CompactLogix 5370 L2 controllers, CompactLogix 5370 L3 controllers, Compact GuardLogix 5370 controllers, ControlLogix 5570 controllers Problem Types: CVE-22 Improper Input Validation Description: The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its c
in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-02 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398
CVE ID: CVE-2020-6999 State: PUBLISHED Published: 2020-03-26T12:06:51 Last Updated: 2024-08-04T09:18:02.494Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-120 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-7000 State: PUBLISHED Published: 2020-04-03T17:50:58 Last Updated: 2024-08-04T09:18:03.107Z Vendors: VISAM Products: VBASE Editor, VBASE Web-Remote Module Problem Types: CWE-922 Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE ID: CVE-2020-7001 State: PUBLISHED Published: 2020-03-24T20:15:15 Last Updated: 2024-08-04T09:18:03.106Z Vendors: n/a Products: Moxa EDS-G516E Series firmware, Version 5.2 or lower Problem Types: CWE-327 Description: In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-04
CVE ID: CVE-2020-7002 State: PUBLISHED Published: 2020-03-18T12:59:14 Last Updated: 2024-08-04T09:18:02.609Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-121 Description: Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-077-01
CVE ID: CVE-2020-7003 State: PUBLISHED Published: 2020-03-24T17:02:34 Last Updated: 2024-08-04T09:18:02.522Z Vendors: n/a Products: Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower Problem Types: CWE-319 Description: In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-02