Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
er-overflow-in-msadpcmdecodeblock-msadpcm-cpp/ - http://www.securityfocus.com/bid/97589 - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13/4 - https://github.com/mpruett/audiofile/issues/36
CVE ID: CVE-2017-6833 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/03/13/5 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecrunpull-blockcodec-cpp/ - https://github.com/mpruett/audiofile/pull/42 - http://www.debian.org/security/2017/dsa-3814 - h
unpull-blockcodec-cpp/ - https://github.com/mpruett/audiofile/pull/42 - http://www.debian.org/security/2017/dsa-3814 - https://github.com/mpruett/audiofile/issues/37
CVE ID: CVE-2017-6834 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/pull/42 - http://www.openwall.com/lists/oss-security/2017/03/13/6 - https://github.com/mpruett/audiofile/issues/38 - http://www.debian.org/security/2017/dsa-3814 - https://blogs.gentoo.
- https://github.com/mpruett/audiofile/issues/38 - http://www.debian.org/security/2017/dsa-3814 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp/
CVE ID: CVE-2017-6835 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/pull/42 - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13/7 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/ - htt
017/03/13/7 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/ - https://github.com/mpruett/audiofile/issues/39
CVE ID: CVE-2017-6836 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/pull/42 - https://github.com/mpruett/audiofile/issues/40 - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13
diofile/issues/40 - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13/8 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/
CVE ID: CVE-2017-6837 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97314 - http://www.debian.org/security/2017/dsa-3814 - https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0 - http://www.openwall.com/lists/oss-security/2017/03/13/9 - https://github.com/mpruett/audiofile/issues/41 - https://blogs.ge
p://www.openwall.com/lists/oss-security/2017/03/13/9 - https://github.com/mpruett/audiofile/issues/41 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
CVE ID: CVE-2017-6838 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13/9 - https://github.com/mpruett/audiofile/issues/41 - https://github.com/antlarr/audiofile/commit/7d65f89defb092b63bcbc5d98349fb222ca73b3c - https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple
r/audiofile/commit/7d65f89defb092b63bcbc5d98349fb222ca73b3c - https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
CVE ID: CVE-2017-6839 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3814 - https://github.com/antlarr/audiofile/commit/beacc44eb8cdf6d58717ec1a5103c5141f1b37f9 - http://www.openwall.com/lists/oss-security/2017/03/13/9 - https://github.com/mpruett/audiofile/issues/41 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ub
03/13/9 - https://github.com/mpruett/audiofile/issues/41 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
CVE ID: CVE-2017-6840 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-invalid-memory-read-in-colorchangergetcolorfromstack-colorchanger-cpp/
CVE ID: CVE-2017-6841 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementtgraphicsstackelement-graphicsstack-h/
CVE ID: CVE-2017-6842 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-colorchangergetcolorfromstack-colorchanger-cpp/
CVE ID: CVE-2017-6843 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-heap-based-buffer-overflow-in-podofopdfvariantdelayedload-pdfvariant-h/
CVE ID: CVE-2017-6844 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-global-buffer-overflow-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/
CVE ID: CVE-2017-6845 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcoloroperator-pdfcolor-cpp/
CVE ID: CVE-2017-6846 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementsetnonstrokingcolorspace-graphicsstack-h/
CVE ID: CVE-2017-6847 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfvariantdelayedload-pdfvariant-h/
CVE ID: CVE-2017-6848 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfxobjectpdfxobject-pdfxobject-cpp/
CVE ID: CVE-2017-6849 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcolorgraypdfcolorgray-pdfcolor-cpp/
CVE ID: CVE-2017-6850 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/25/jasper-null-pointer-dereference-in-jp2_cdef_destroy-jp2_cod-c/ - https://github.com/mdadams/jasper/commit/e96fc4fdd525fa0ede28074a7e2b1caf94b58b0d - https://github.com/mdadams/jasper/issues/112 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2017-6851 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mdadams/jasper/issues/113 - https://blogs.gentoo.org/ago/2017/01/25/jasper-invalid-memory-read-in-jas_matrix_bindsub-jas_seq-c/ - https://security.gentoo.org/glsa/201908-03
CVE ID: CVE-2017-6852 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/25/jasper-heap-based-buffer-overflow-in-jpc_dec_decodepkt-jpc_t2dec-c/ - https://github.com/mdadams/jasper/issues/114 - https://security.gentoo.org/glsa/201908-03
CVE ID: CVE-2017-6862 State: PUBLISHED Published: 2017-05-26T20:00:00.000Z Last Updated: 2025-10-21T23:55:40.404Z Vendors: n/a Products: NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 Problem Types: Unauthenticated Remote Code Execution Description: NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.netgear.com/000038542/Security
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261 - http://www.securityfocus.com/bid/98740 - https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_netgear_wnr2000v5_-_cve-2017-6862.pdf
CVE ID: CVE-2017-6864 State: PUBLISHED Published: 2017-03-29T01:00:00 Last Updated: 2024-08-05T15:41:17.697Z Vendors: n/a Products: RUGGEDCOM ROX I All versions Problem Types: CWE-79 Description: The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97170 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf - http://www.securitytracker.com/id/1038160 - https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE ID: CVE-2017-6865 State: PUBLISHED Published: 2017-05-11T10:00:00 Last Updated: 2024-08-05T15:41:17.697Z Vendors: Siemens AG Products: Primary Setup Tool (PST), SIMATIC Automation Tool, SIMATIC NET PC-Software, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC STEP 7 (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) V14, SIMATIC STEP 7 V5.X, SIMATIC WinAC RTX 2010 SP2, SIMATIC WinAC RTX F 2010 SP2, SIMATIC WinCC (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC V7.2 and prior, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC flexible 2008, SINAUT ST7CC, SINEMA Server, SINUMERIK 808D Programming Tool, SMART PC Access, STEP 7 - Micro/WIN SMART, Security Configuration Tool (SCT
EMA Server, SINUMERIK 808D Programming Tool, SMART PC Access, STEP 7 - Micro/WIN SMART, Security Configuration Tool (SCT) Problem Types: Other Description: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V
6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Securi
versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-275839.pdf - https://www.securityfocus.com/bid/98366
CVE ID: CVE-2017-6866 State: PUBLISHED Published: 2017-08-07T23:00:00 Last Updated: 2024-08-05T15:41:17.651Z Vendors: n/a Products: XHQ 4 (All versions before V4.7.1.3), XHQ 5 (All versions before V5.0.0.2) Problem Types: CWE-284 Description: A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow an authenticated low-privileged remote user to gain read access to data in the XHQ solution exceeding his configured permission level. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99247 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-945660.pdf
CVE ID: CVE-2017-6867 State: PUBLISHED Published: 2017-05-11T10:00:00 Last Updated: 2024-08-05T15:41:17.675Z Vendors: n/a Products: Siemens SIMATIC WinCC Problem Types: CWE-787 Description: A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.
ssages to the DCOM interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98368 - https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdf
CVE ID: CVE-2017-6868 State: PUBLISHED Published: 2017-07-07T17:00:00 Last Updated: 2024-08-05T15:41:17.673Z Vendors: n/a Products: Siemens SIMATIC CP 44x-1 Redundant Network Access Modules Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process (CP) of the RNA series module, if network access to Port 102/TCP is available and the configuration file for the CP is stored on the RNA's CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99234 - http
NA's CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99234 - http://www.securitytracker.com/id/1038788 - https://ics-cert.us-cert.gov/advisories/ICSA-17-173-01 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-126840.pdf
CVE ID: CVE-2017-6869 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T15:41:17.699Z Vendors: n/a Products: ViewPort for Web Office Portal before revision number 1453 Problem Types: CWE-287 Description: A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99343 - https://www.siemens.com/cert
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99343 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-545214.pdf
CVE ID: CVE-2017-6870 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T15:41:17.673Z Vendors: n/a Products: SIMATIC WinCC Sm@rtClient for Android Problem Types: CWE-300 Description: A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99582 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf
CVE ID: CVE-2017-6871 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T15:41:17.693Z Vendors: n/a Products: SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android Problem Types: CWE-288 Description: A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
anism under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99582 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf
CVE ID: CVE-2017-6872 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T15:41:17.694Z Vendors: n/a Products: OZW672, OZW772 Problem Types: CWE-306 Description: A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99473 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf
CVE ID: CVE-2017-6873 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T15:41:17.674Z Vendors: n/a Products: OZW672, OZW772 Problem Types: CWE-306 Description: A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99473 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-563539.pdf