Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10911 State: PUBLISHED Published: 2019-05-16T21:29:34 Last Updated: 2024-08-04T22:40:15.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_19_19 - https://symfony.com/blog/cve-2019-10911-add-a-separator-in-the-remember-me-cookie-hash - https://github
ology_SA_19_19 - https://symfony.com/blog/cve-2019-10911-add-a-separator-in-the-remember-me-cookie-hash - https://github.com/symfony/symfony/commit/a29ce2817cf43bb1850cf6af114004ac26c7a081
CVE ID: CVE-2019-10912 State: PUBLISHED Published: 2019-05-16T21:20:12 Last Updated: 2024-08-04T22:40:15.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has access to. This is related to symfony/cache and symfony/phpunit-bridge. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2019-10912-prevent-destructors-with-side-effects-from-being-unserialized - https://lists.fedoraproject.org
.com/blog/cve-2019-10912-prevent-destructors-with-side-effects-from-being-unserialized - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTJGZJLPG5FHKFH7KNAKNTWOGBB6LXAL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLOZX5BZMQKWG7PJRQL6MB5CAMKBQAWD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFARAUAWZE4UDSKVDWRD35D75HI5UGSD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDSM576XIOVXVCMHNJHLBBZBTOD62LDA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
sage/MDSM576XIOVXVCMHNJHLBBZBTOD62LDA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAC2TQVEEH5FDJSSWPM2BCRIPTCOEMMO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42UEKSLKJB72P24JBWVN6AADHLMYSUQD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QEAOZXVNDA63537A2OIH4QE77EKZR5O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHHIG4GMSGEIDT3RITSW7GJ5NT6IBHXU/ - https://www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq/2019/May/21 - https://github.com/symfony/symfony/c
/www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq/2019/May/21 - https://github.com/symfony/symfony/commit/4fb975281634b8d49ebf013af9e502e67c28816b - https://typo3.org/security/advisory/typo3-core-sa-2019-016/
CVE ID: CVE-2019-10913 State: PUBLISHED Published: 2019-05-16T21:15:04 Last Updated: 2024-08-04T22:40:15.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2019-10913-reject-invalid-http-method-overrides - https://github.com/symfony/symfony/commit/944e60f083c3bffbc6a0b5112db127a1
-10913-reject-invalid-http-method-overrides - https://github.com/symfony/symfony/commit/944e60f083c3bffbc6a0b5112db127a10a66a8ec
CVE ID: CVE-2019-10914 State: PUBLISHED Published: 2019-04-08T13:31:01 Last Updated: 2024-08-04T22:40:15.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1785 - https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open - https://github.com/matrixssl/matrixssl/issues/26 - https://www.openwall.com/lists/oss-secur
sl/releases/tag/4-0-2-open - https://github.com/matrixssl/matrixssl/issues/26 - https://www.openwall.com/lists/oss-security/2019/02/15/1
CVE ID: CVE-2019-10915 State: PUBLISHED Published: 2019-07-11T21:17:46 Last Updated: 2024-08-04T22:40:15.369Z Vendors: Siemens AG Products: TIA Administrator Problem Types: CWE-306 Description: A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the
nteraction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf - http://www.securityfocus.com/bid/109124 - https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf - https://www.us-cert.gov/ics/advisories/icsa-19-253-02
CVE ID: CVE-2019-10916 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.179Z Vendors: Siemens AG Products: SIMATIC PCS 7 V8.0 and earlier, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC WinCC (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC (TIA Portal) V15, SIMATIC WinCC Runtime Professional V13, SIMATIC WinCC Runtime Professional V14, SIMATIC WinCC Runtime Professional V15, SIMATIC WinCC V7.2 and earlier, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5 Problem Types: CWE-89 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1
erability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions),
8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). An attacker with access to the project file could run arbitrary system commands with the privileges of the local database server. The vulnerability could be exploited by an attacker with access to the project file. The vulnerability does impact the confidentiality, integrity, and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional
system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-697412.pdf - https://www.us-cert.gov/ics/advisories/ICSA-19-134-08
CVE ID: CVE-2019-10917 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.224Z Vendors: Siemens AG Products: SIMATIC PCS 7 V8.0 and earlier, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC WinCC (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC (TIA Portal) V15, SIMATIC WinCC Runtime Professional V13, SIMATIC WinCC Runtime Professional V14, SIMATIC WinCC Runtime Professional V15, SIMATIC WinCC V7.2 and earlier, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5 Problem Types: CWE-248 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1
nerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions),
8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). An attacker with local access to the project file could cause a Denial-of-Service condition on the affected product while the project file is loaded. Successful exploitation requires access to the project file. An attacker could use the vulnerability to compromise availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes:
time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-697412.pdf - https://www.us-cert.gov/ics/advisories/ICSA-19-134-08
CVE ID: CVE-2019-10918 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.144Z Vendors: Siemens AG Products: SIMATIC PCS 7 V8.0 and earlier, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC WinCC (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC (TIA Portal) V15, SIMATIC WinCC Runtime Professional V13, SIMATIC WinCC Runtime Professional V14, SIMATIC WinCC Runtime Professional V15, SIMATIC WinCC V7.2 and earlier, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5 Problem Types: CWE-749 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1
8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). An authenticatd attacker with network access to the DCOM interface could execute arbitrary commands with SYSTEM privileges. The vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires authentication with a low-privileged user account and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability
user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-697412.pdf - https://www.us-cert.gov/ics/advisories/ICSA-19-134-08
CVE ID: CVE-2019-10919 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.128Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-306 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts
ess to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108382 - https://seclists.org/bugtraq/2019/May/73 - http://seclists.org/fulldisclosure/2019/May/45 - https://cert-portal.siemens.com/productcert/pdf/ssa-542701.pdf - http://packetstormsecurity.com/files/153123/Siemens-LOGO-8-Missing-Authentication.html
CVE ID: CVE-2019-10920 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.342Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-321 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory
to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108382 - https://seclists.org/bugtraq/2019/May/72 - http://seclists.org/fulldisclosure/2019/May/44 - https://cert-portal.siemens.com/productcert/pdf/ssa-542701.pdf - http://packetstormsecurity.com/files/153122/Siemens-LOGO-8-Hard-Coded-Cryptographic-Key.html
CVE ID: CVE-2019-10921 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.264Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-256 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time o
required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108382 - https://seclists.org/bugtraq/2019/May/74 - http://seclists.org/fulldisclosure/2019/May/49 - https://cert-portal.siemens.com/productcert/pdf/ssa-542701.pdf - http://packetstormsecurity.com/files/153124/Siemens-LOGO-8-Recoverable-Password-Format.html
CVE ID: CVE-2019-10922 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.230Z Vendors: Siemens AG Products: SIMATIC PCS 7 V8.0 and earlier, SIMATIC PCS 7 V8.1 and newer, SIMATIC WinCC V7.2 and earlier, SIMATIC WinCC V7.3 and newer Problem Types: CWE-306 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions). An attacker with network access to affected installations, which are configured without "Encrypted Communication", can execute arbitrary code. The security vulnerability could be
which are configured without "Encrypted Communication", can execute arbitrary code. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-705517.pdf - http://www.securityfocus.com/bid/108398
CVE ID: CVE-2019-10923 State: PUBLISHED Published: 2019-10-10T13:49:24 Last Updated: 2025-02-11T10:26:23.281Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SCALANCE X-200IRT family (incl. SIPLUS NET variants), SIMATIC CP 1604, SIMATIC CP 1616, SIMATIC ET 200M (incl. SIPLUS variants), SIMATIC ET 200MP IM 155-5 PN HF, SIMATIC ET 200MP IM 155-5 PN ST, SIMATIC ET 200pro IM 154-3 PN HF, SIMATIC ET 200pro IM 154-4 PN HF, SIMATIC ET 200pro
SIMATIC ET 200MP IM 155-5 PN ST, SIMATIC ET 200pro IM 154-3 PN HF, SIMATIC ET 200pro IM 154-4 PN HF, SIMATIC ET 200pro IM 154-8 PN/DP CPU, SIMATIC ET 200pro IM 154-8F PN/DP CPU, SIMATIC ET 200pro IM 154-8FX PN/DP CPU, SIMATIC ET 200S IM 151-8 PN/DP CPU, SIMATIC ET 200S IM 151-8F PN/DP CPU, SIMATIC ET 200SP IM 155-6 PN HF, SIMATIC ET 200SP IM 155-6 PN ST, SIMATIC ET 200SP IM 155-6 PN ST BA, SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET20
DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200S (incl. SIPLUS variants), SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3
TIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SIMOTION, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 Control Unit, SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS G130, SINAMICS G150, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7
ntrol Unit (incl. SIPLUS variants), SINAMICS G130, SINAMICS G150, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants), SINAMICS S150, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200MP IM 155-5 PN HF, SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, SIPLUS ET 200MP IM 155-5 PN ST, SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, SIPLUS ET 200S IM 151-8 PN/DP CPU, SIPLUS ET 200S IM 151-8F PN/DP CPU, SIPLUS ET 200SP IM 155-6 PN HF, SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, SIPLUS ET 200SP IM 155-6 PN ST,
1-8F PN/DP CPU, SIPLUS ET 200SP IM 155-6 PN HF, SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, SIPLUS ET 200SP IM 155-6 PN ST, SIPLUS ET 200SP IM 155-6 PN ST BA, SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7 Problem Types: CWE-400 Description: An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation. Additional Analyst Notes: -
ice condition by breaking the real-time synchronization (IRT) of the affected installation. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf - https://cert-portal.siemens.com/productcert/html/ssa-349422.html
CVE ID: CVE-2019-10924 State: PUBLISHED Published: 2019-05-14T19:54:48 Last Updated: 2024-08-04T22:40:15.136Z Vendors: Siemens Products: LOGO! Soft Comfort Problem Types: CWE-502 Description: A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.3). The vulnerability could allow an attacker to execute arbitrary code if the attacker tricks a legitimate user to open a manipulated project. In order to exploit the vulnerability, a valid user must open a manipulated project file. No further privileges are required on the target system. The vulnerability could compromise the confidentiality, integrity and availability of the engineering station. At the time of advisory publi
uld compromise the confidentiality, integrity and availability of the engineering station. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108368 - https://cert-portal.siemens.com/productcert/pdf/ssa-102144.pdf
CVE ID: CVE-2019-10925 State: PUBLISHED Published: 2019-06-12T13:47:56 Last Updated: 2024-08-04T22:40:15.426Z Vendors: Siemens Products: SIMATIC MV400 family Problem Types: CWE-284 Description: A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Valid user credentials, but no user interaction are required. Successful exploitation compromises integrity and availability of the device. At the time of advisory publication no public exploitation of this s