Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7798 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T06:37:59.359Z Vendors: Schneider Electric SE Products: Modicon M221, All Versions Problem Types: Insufficient Verification of Data Authenticity Description: A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mask and gateway) when remotely connected to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105970 - https://www.schneider-electric.com/en/download/document/SEVD-2018-270-01/
CVE ID: CVE-2018-7799 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T06:37:59.240Z Vendors: Schneider Electric SE Products: Schneider Electric Software Update (SESU), all versions prior to V2.2.0 Problem Types: DLL hijacking vulnerability Description: A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105951 - https://www.schneider-electric.com/en/download/document/SEVD-2018-298-01/ - https://ics-c
securityfocus.com/bid/105951 - https://www.schneider-electric.com/en/download/document/SEVD-2018-298-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02
CVE ID: CVE-2018-7800 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:58.855Z Vendors: Schneider Electric SE Products: EVLink Parking v3.2.0-12_v1 and earlier Problem Types: Hard-coded Credentials Description: A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacker to gain access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/ - http://www.securityfocus.com/bid/106807 - https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01
CVE ID: CVE-2018-7801 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.388Z Vendors: Schneider Electric SE Products: EVLink Parking v3.2.0-12_v1 and earlier Problem Types: Code Injection Description: A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/ - http://www.securityfocus.com/bid/106807 - https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01 - http://seclists.org/fulldisclosure/2021/Jul/32
CVE ID: CVE-2018-7802 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.208Z Vendors: Schneider Electric SE Products: EVLink Parking v3.2.0-12_v1 and earlier Problem Types: SQL Injection v Description: A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web interface with full privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/ - http://www.securityfocus.com/bid/106807 - https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01
CVE ID: CVE-2018-7803 State: PUBLISHED Published: 2019-05-22T20:08:29 Last Updated: 2024-08-05T06:37:59.619Z Vendors: n/a Products: Triconex TriStation Emulator V1.2.0 Problem Types: Improper Check for Unusual or Exceptional Conditions Description: A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing. It is susceptible to an attack only while running in off-line mode. This vulnerability does not exist in Triconex hardware products and therefore has no effect on the operating safe
mode. This vulnerability does not exist in Triconex hardware products and therefore has no effect on the operating safety functions in a plant. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-071-03
CVE ID: CVE-2018-7804 State: PUBLISHED Published: 2018-12-17T22:00:00 Last Updated: 2024-08-05T06:37:59.165Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: URL Redirection to Untrusted Site Description: A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7806 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.617Z Vendors: Schneider Electric SE Products: Data Center Operation all versions Problem Types: Path Traversal Description: Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java
system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code. Additional Analyst Notes: - CVE Program Container: References: - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
CVE ID: CVE-2018-7807 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.166Z Vendors: Schneider Electric SE Products: Data Center Expert versions 7.5.0 and earlier Problem Types: Path Traversal Description: Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly kno
ned with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code. Additional Analyst Notes: - CVE Program Container: References: - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
CVE ID: CVE-2018-7809 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.446Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Unverified Password Change Description: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/docu
eferences: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7810 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.377Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running
ing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7811 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.588Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Unverified Password Change Description: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/docum
ferences: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/ - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2018-7812 State: PUBLISHED Published: 2018-12-17T22:00:00 Last Updated: 2024-08-05T06:37:59.305Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Information Exposure Through Discrepancy Description: An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. Additional Analyst Notes: - CVE Program Container: Referen
such as whether a particular operation was successful or not. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-7812 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7813 State: PUBLISHED Published: 2019-02-06T23:00:00 Last Updated: 2024-08-05T06:37:59.240Z Vendors: Schneider Electric SE Products: Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) Problem Types: Type Confusion Description: A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on pcwin.dll which could cause remote code to be executed when parsing a GD1 file Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2018-338-01 - http://www.securityfocus.com/bid/106218
CVE ID: CVE-2018-7814 State: PUBLISHED Published: 2019-02-06T23:00:00 Last Updated: 2024-08-05T06:37:59.405Z Vendors: Schneider Electric SE Products: Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) Problem Types: Stack-based Buffer Overflow Description: A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remote code to be executed when parsing a GD1 file Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2018-338-01 - http://www.securityfocus.com/bid/106218
CVE ID: CVE-2018-7815 State: PUBLISHED Published: 2019-02-06T23:00:00 Last Updated: 2024-08-05T06:37:59.350Z Vendors: Schneider Electric SE Products: Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) Problem Types: Type Confusion Description: A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3core.dll which could cause remote code to be executed when parsing a GD1 file Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2018-338-01 - http://www.securityfocus.com/bid/106218
CVE ID: CVE-2018-7816 State: PUBLISHED Published: 2019-05-22T19:30:57 Last Updated: 2024-08-05T06:37:59.196Z Vendors: Pelco Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7817 State: PUBLISHED Published: 2019-02-06T23:00:00 Last Updated: 2024-08-05T06:37:59.360Z Vendors: Schneider Electric SE Products: Zelio Soft 2 v5.1 and prior versions Problem Types: CWE-416 Description: A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106481 - https://www.schneider-electric.com/en/download/document/SEVD-2018-361-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-19-008-01
CVE ID: CVE-2018-7820 State: PUBLISHED Published: 2019-09-17T19:45:32 Last Updated: 2024-08-05T06:37:59.195Z Vendors: Schneider Electric SE Products: APC UPS Network Management Card 2 AOS Problem Types: CWE-255 Description: A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.apc.com/salestools/CCON-BFQMXC/CCON-BFQMXC_R0_EN.pdf
CVE ID: CVE-2018-7821 State: PUBLISHED Published: 2019-05-22T19:36:47 Last Updated: 2024-08-05T06:37:59.137Z Vendors: n/a Products: SoMachine Basic and Modicon M221, SoMachine Basic, all versions Modicon M221, all references, all versions prior to firmware V1.10.0.0 Problem Types: Multiple Vulnerabilities Description: An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/do
is activated. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
CVE ID: CVE-2018-7822 State: PUBLISHED Published: 2019-05-22T19:37:16 Last Updated: 2024-08-05T06:37:59.180Z Vendors: n/a Products: SoMachine Basic and Modicon M221, SoMachine Basic, all versions Modicon M221, all references, all versions prior to firmware V1.10.0.0 Problem Types: Multiple Vulnerabilities Description: An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneid
the system hosting SoMachine Basic. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
CVE ID: CVE-2018-7823 State: PUBLISHED Published: 2019-05-22T19:37:45 Last Updated: 2024-08-05T06:37:59.690Z Vendors: n/a Products: SoMachine Basic and Modicon M221, SoMachine Basic, all versions Modicon M221, all references, all versions prior to firmware V1.10.0.0 Problem Types: Multiple Vulnerabilities Description: A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause remote launch of SoMachine Basic when sending crafted ethernet message. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
CVE ID: CVE-2018-7824 State: PUBLISHED Published: 2019-05-22T19:27:44 Last Updated: 2024-08-05T06:37:59.163Z Vendors: Schneider Products: Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) Problem Types: CWE-610 Description: An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only t
nd as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-099-01/
CVE ID: CVE-2018-7825 State: PUBLISHED Published: 2019-05-22T19:32:25 Last Updated: 2024-08-05T06:37:59.416Z Vendors: n/a Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7826 State: PUBLISHED Published: 2019-05-22T19:33:00 Last Updated: 2024-08-05T06:37:59.404Z Vendors: n/a Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7827 State: PUBLISHED Published: 2019-05-22T19:33:25 Last Updated: 2024-08-05T06:37:59.403Z Vendors: n/a Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7828 State: PUBLISHED Published: 2019-05-22T19:34:25 Last Updated: 2024-08-05T06:37:59.496Z Vendors: n/a Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7829 State: PUBLISHED Published: 2019-05-22T19:35:13 Last Updated: 2024-08-05T06:37:59.520Z Vendors: n/a Products: Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ Problem Types: Multiple Vulnerabilities Description: An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
CVE ID: CVE-2018-7830 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.474Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Description: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http
inute by sending a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7831 State: PUBLISHED Published: 2018-11-30T19:00:00 Last Updated: 2024-08-05T06:37:59.349Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server. Additional Analyst Notes: - CVE
currently authenticated web server user to execute a password change on the web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-38 - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7832 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.499Z Vendors: Schneider Electric SE Products: Pro-Face GP-Pro EX v4.08 and previous versions Problem Types: Improper Input Validation Description: An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-02/ - http://www.securityfocus.com/bid/106441 - https://ics-cert.us-cert.gov/advisories/ICSA-19-003-01