Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected products use a numeric password with a small maximum character size for the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038546 - https:
ord. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038546 - https://ics-cert.us-cert.gov/advisories/ICSA-17-115-04
CVE ID: CVE-2017-7905 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T16:19:29.324Z Vendors: n/a Products: GE Multilin SR, UR, and URplus Protective Relays Problem Types: CWE-261 Description: A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Version 5.23; SR 489 Generator Protection Relay, firmware versions prior to Version 4.06; SR 745 Transformer Protection Relay, firmware versions prior to Version 5.23; SR 369 Motor Protectio
or to Version 4.06; SR 745 Transformer Protection Relay, firmware versions prior to Version 5.23; SR 369 Motor Protection Relay, all firmware versions; Multilin Universal Relay, firmware Version 6.0 and prior versions; and Multilin URplus (D90, C90, B95), all versions. Ciphertext versions of user passwords were created with a non-random initialization vector leaving them susceptible to dictionary attacks. Ciphertext of user passwords can be obtained from the front LCD panel of affected products and through issued Modbus commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98063 - https://ics-cert.us-cert.gov/advisories/ICSA-17-117-01A
CVE ID: CVE-2017-7906 State: PUBLISHED Published: 2018-06-06T20:00:00Z Last Updated: 2024-09-17T01:31:38.404Z Vendors: ICS-CERT Products: ABB IP GATEWAY Problem Types: CWE-352 Description: In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104388 - https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01
CVE ID: CVE-2017-7907 State: PUBLISHED Published: 2017-05-19T02:43:00 Last Updated: 2024-08-05T16:19:28.336Z Vendors: n/a Products: Schneider Electric Wonderware Historian Client Problem Types: CWE-611 Description: An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XML external entity reference, or XXE) may allow an attacker to enter malicious input through the application which could cause a denial of service or disclose file contents from a server or connected network. Additional Analyst Notes: - CVE Program Container: References: - http://www.se
tents from a server or connected network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98254 - http://www.securitytracker.com/id/1038542 - https://ics-cert.us-cert.gov/advisories/ICSA-17-122-01 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000120/
CVE ID: CVE-2017-7908 State: PUBLISHED Published: 2018-10-02T21:00:00Z Last Updated: 2024-09-17T03:12:49.643Z Vendors: GE Products: GE Communicator Problem Types: CWE-122 Description: A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-275-02 - http://www.securityfocus.com/bid/99580
CVE ID: CVE-2017-7909 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T16:19:29.487Z Vendors: n/a Products: Advantech B+B SmartWorx MESR901 Problem Types: CWE-603 Description: A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-122-03 - http://www.securityfocus.com/bid/98257
CVE ID: CVE-2017-7910 State: PUBLISHED Published: 2017-06-14T21:00:00 Last Updated: 2024-08-05T16:19:29.211Z Vendors: n/a Products: Digital Canal Structural Wind Analysis Problem Types: CWE-121 Description: A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-157-02 - http://www.securityfocus.com/bid/98976
CVE ID: CVE-2017-7911 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T16:19:28.663Z Vendors: n/a Products: CyberVision Kaa IoT Platform Problem Types: CWE-485 Description: A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-19 - http://www.securityfocus.com/bid/98256 - https://ics-cert.us-cert.gov/advisories/ICSA-17-122-02
CVE ID: CVE-2017-7912 State: PUBLISHED Published: 2019-04-08T14:17:09 Last Updated: 2024-08-05T16:19:29.055Z Vendors: Hanwha Techwin Products: SRN-4000 Problem Types: CWE-284 Description: Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03
CVE ID: CVE-2017-7913 State: PUBLISHED Published: 2017-05-29T16:00:00 Last Updated: 2024-08-05T16:19:29.494Z Vendors: n/a Products: Moxa OnCell Problem Types: CWE-256 Description: A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/ad
passwords in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE ID: CVE-2017-7914 State: PUBLISHED Published: 2017-06-14T21:00:00 Last Updated: 2024-08-05T16:19:29.506Z Vendors: n/a Products: Rockwell Automation PanelView Plus 6 700-1500 Problem Types: CWE-882 Description: A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access. Additional Analyst Notes: - CVE Progr
orization check when connecting to the device, allowing an attacker remote access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-157-01
CVE ID: CVE-2017-7915 State: PUBLISHED Published: 2017-05-29T16:00:00 Last Updated: 2024-08-05T16:19:29.342Z Vendors: n/a Products: Moxa OnCell Problem Types: CWE-307 Description: An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http
ermine parameters needed to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE ID: CVE-2017-7916 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T16:19:29.309Z Vendors: n/a Products: ABB VSN300 WiFi Logger Card Problem Types: CWE-264 Description: A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict privileges of the Guest account. A malicious user may be able to gain access to configuration information that should be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99558 - http://search.abb.com/librar
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99558 - http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch - https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03
CVE ID: CVE-2017-7917 State: PUBLISHED Published: 2017-05-29T16:00:00 Last Updated: 2024-08-05T16:19:29.287Z Vendors: n/a Products: Moxa OnCell Problem Types: CWE-352 Description: A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
rovided by the user who submitted the request, which could allow an attacker to modify the configuration of the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE ID: CVE-2017-7918 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-05T16:19:29.493Z Vendors: n/a Products: Cambium Networks ePMP Problem Types: CWE-284 Description: An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99083 - https://ics-cert.us-cert.gov/advisories/ICSA-17-166-
m Container: References: - http://www.securityfocus.com/bid/99083 - https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01
CVE ID: CVE-2017-7919 State: PUBLISHED Published: 2017-07-03T19:00:00 Last Updated: 2024-08-05T16:19:29.200Z Vendors: n/a Products: Newport XPS-Cx, XPS-Qx Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99291 - https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01
CVE ID: CVE-2017-7920 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T16:19:29.337Z Vendors: n/a Products: ABB VSN300 WiFi Logger Card Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access internal information about status and connected devices without authenticating. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99558 - http://search.abb.com/library/Download.
- CVE Program Container: References: - http://www.securityfocus.com/bid/99558 - http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch - https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03
CVE ID: CVE-2017-7921 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-12-27T20:39:36.735Z Vendors: n/a Products: Hikvision Cameras Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices
ies V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 - http://www.securityfocus.com/bid/98313 - https://ghostbin.com/paste/q2vq2 - http://www.hikvision.com/us/about_10805.html
CVE ID: CVE-2017-7922 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-05T16:19:29.327Z Vendors: n/a Products: Cambium Networks ePMP Problem Types: CWE-269 Description: An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99083 - https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01
CVE ID: CVE-2017-7923 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-12-27T20:58:21.460Z Vendors: n/a Products: Hikvision Cameras Problem Types: CWE-260 Description: A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 d
Fx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-124-01 - http://www.securityfocus.com/bid/98313 - https://ghostbin.com/paste/q2vq2 - http://www.hikvision.com/us/about_10807.html
CVE ID: CVE-2017-7924 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-05T16:19:29.466Z Vendors: n/a Products: Rockwell Automation MicroLogix 1100 Controllers Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99622 -
DoS condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99622 - https://ics-cert.us-cert.gov/advisories/ICSA-17-138-03
CVE ID: CVE-2017-7925 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T16:19:29.170Z Vendors: n/a Products: Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras Problem Types: CWE-260 Description: A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user an
on file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02 - http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php - http://www.securityfocus.com/bid/98312
CVE ID: CVE-2017-7926 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T16:19:29.136Z Vendors: n/a Products: OSIsoft PI Web API 2017 Problem Types: CWE-352 Description: A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-164-03 - http://www.securityfocus.com/bid/99058
CVE ID: CVE-2017-7927 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T16:19:29.227Z Vendors: n/a Products: Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras Problem Types: CWE-836 Description: A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a mali
. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02 - http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php - http://www.securityfocus.com/bid/98312
CVE ID: CVE-2017-7928 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T16:19:29.162Z Vendors: n/a Products: Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622 Problem Types: CWE-284 Description: An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA
m devices. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-192-06 - http://www.securityfocus.com/bid/99536
CVE ID: CVE-2017-7929 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T16:19:29.504Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-36 Description: An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98311 - https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03
CVE ID: CVE-2017-7930 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T16:19:29.247Z Vendors: n/a Products: OSIsoft PI Server 2017 Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02 - http://www.securityfocus.com/bid/99059
CVE ID: CVE-2017-7931 State: PUBLISHED Published: 2018-06-06T20:00:00Z Last Updated: 2024-09-17T02:47:46.978Z Vendors: ICS-CERT Products: ABB IP GATEWAY Problem Types: CWE-287 Description: In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104388 - https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01
CVE ID: CVE-2017-7932 State: PUBLISHED Published: 2017-08-07T08:00:00 Last Updated: 2024-08-05T16:19:29.197Z Vendors: n/a Products: NXP i.MX Product Family Problem Types: CWE-295 Description: An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of
it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02 - http://www.securityfocus.com/bid/99966