Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25662 State: PUBLISHED Published: 2021-05-12T13:18:22 Last Updated: 2024-08-03T20:11:27.535Z Vendors: Siemens Products: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) , SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) , SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16 Problem Types: CWE-755 Description: A vulnera
F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16 Problem Types: CWE-755 Description: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels
Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC client fails to handle an exception properly if the program execution process is modified after sending a packet from the server, which could result in a Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://us-cert.cisa.gov/ics/advisories/icsa
erences: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12
CVE ID: CVE-2021-25663 State: PUBLISHED Published: 2021-04-22T20:42:20 Last Updated: 2025-03-11T09:47:33.806Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Capital Embedded AR Classic 431-422, Capital Embedded AR Classic R20-11, Nucleus NET, Nucleus ReadyStart V3, Nucleus ReadyStart V4, Nucleus Source Code Problem Types: CWE-835 Description: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source
sions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05 - https://cert-portal.siemens.com/productcert/html/ssa-248289.html
CVE ID: CVE-2021-25664 State: PUBLISHED Published: 2021-04-22T20:42:20 Last Updated: 2025-03-11T09:47:35.103Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Capital Embedded AR Classic 431-422, Capital Embedded AR Classic R20-11, Nucleus NET, Nucleus ReadyStart V3, Nucleus ReadyStart V4, Nucleus Source Code Problem Types: CWE-835 Description: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source
sions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05 - https://cert-portal.siemens.com/productcert/html/ssa-248289.html
CVE ID: CVE-2021-25665 State: PUBLISHED Published: 2021-09-14T10:47:22 Last Updated: 2024-08-03T20:11:27.598Z Vendors: Siemens Products: Simcenter STAR-CCM+ Viewer Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13700) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/produc
(ZDI-CAN-13700) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-109294.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-1074/
CVE ID: CVE-2021-25666 State: PUBLISHED Published: 2021-02-09T15:38:21 Last Updated: 2024-08-03T20:11:27.506Z Vendors: Siemens Products: SCALANCE W780 and W740 (IEEE 802.11n) family Problem Types: CWE-770 Description: A vulnerability has been identified in SCALANCE W780 and W740 (IEEE 802.11n) family (All versions < V6.3). Sending specially crafted packets through the ARP protocol to an affected device could cause a partial denial-of-service, preventing the device to operate normally for a short period of time. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-0
- https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-07
CVE ID: CVE-2021-25667 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:27.468Z Vendors: Siemens Products: RUGGEDCOM RM1224, SCALANCE M-800, SCALANCE S615, SCALANCE SC-600 Family, SCALANCE XB-200, SCALANCE XC-200, SCALANCE XF-200BA, SCALANCE XM400, SCALANCE XP-200, SCALANCE XR-300WG, SCALANCE XR500 Problem Types: CWE-121 Description: A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALAN
All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active. Additional Analyst Notes: - CVE Program Container: References: - https://cert-po
ing feature of the device to be active. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03
CVE ID: CVE-2021-25668 State: PUBLISHED Published: 2021-04-22T20:42:20 Last Updated: 2024-08-03T20:11:27.504Z Vendors: Siemens Products: SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2 IRT, SCALANCE X202-2P IRT (incl. SIPLUS NET variant), SCALANCE X202-2P IRT PRO, SCALANCE X204 IRT, SCALANCE X204 IRT PRO, SCALANCE X204-2 (incl. SIPLUS NET variant), SCALANCE X204-2FM, SCALANCE X204-2LD (incl. SIPLUS NET variant), SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208 (incl. SIPLUS NET variant), SCALANCE X208PRO, SCALANCE X212-2 (incl. SIPLUS NET variant), SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE XF201-3
E X208PRO, SCALANCE X212-2 (incl. SIPLUS NET variant), SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204 IRT, SCALANCE XF204-2 (incl. SIPLUS NET variant), SCALANCE XF204-2BA IRT, SCALANCE XF206-1, SCALANCE XF208 Problem Types: CWE-122 Description: A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions <
NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions < 5.5.1), SCALANCE X204 IRT PRO (All versions < 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2
ons < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of
CALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf
CVE ID: CVE-2021-25669 State: PUBLISHED Published: 2021-04-22T20:42:20 Last Updated: 2024-08-03T20:11:27.908Z Vendors: Siemens Products: SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2 IRT, SCALANCE X202-2P IRT (incl. SIPLUS NET variant), SCALANCE X202-2P IRT PRO, SCALANCE X204 IRT, SCALANCE X204 IRT PRO, SCALANCE X204-2 (incl. SIPLUS NET variant), SCALANCE X204-2FM, SCALANCE X204-2LD (incl. SIPLUS NET variant), SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208 (incl. SIPLUS NET variant), SCALANCE X208PRO, SCALANCE X212-2 (incl. SIPLUS NET variant), SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE XF201-3
E X208PRO, SCALANCE X212-2 (incl. SIPLUS NET variant), SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204 IRT, SCALANCE XF204-2 (incl. SIPLUS NET variant), SCALANCE XF204-2BA IRT, SCALANCE XF206-1, SCALANCE XF208 Problem Types: CWE-121 Description: A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions <
ons < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the web server may write out of bounds i
CALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the web server may write out of bounds in stack. An attacker might leverage this to denial-of-service of the device or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf
CVE ID: CVE-2021-25670 State: PUBLISHED Published: 2021-04-22T20:42:21 Last Updated: 2024-08-03T20:11:28.324Z Vendors: Siemens Products: Tecnomatix RobotExpert Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected applications lack proper validation of user-supplied data when parsing CELL files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12608) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163226.p
ional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf
CVE ID: CVE-2021-25671 State: PUBLISHED Published: 2021-07-13T11:02:54 Last Updated: 2024-08-03T20:11:28.082Z Vendors: Siemens Products: RWG1.M12, RWG1.M12D, RWG1.M8 Problem Types: CWE-770 Description: A vulnerability has been identified in RWG1.M12 (All versions < V1.16.16), RWG1.M12D (All versions < V1.16.16), RWG1.M8 (All versions < V1.16.16). Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is needed to restore normal operations. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-448291.pdf
CVE ID: CVE-2021-25672 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:27.709Z Vendors: Siemens Products: Mendix Forgot Password Appstore module Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf
CVE ID: CVE-2021-25673 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:28.393Z Vendors: Siemens Products: SIMATIC S7-PLCSIM V5.4 Problem Types: CWE-835 Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop, become unresponsive and must be restarted to restore the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE ID: CVE-2021-25674 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:27.880Z Vendors: Siemens Products: SIMATIC S7-PLCSIM V5.4 Problem Types: CWE-476 Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-2
. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE ID: CVE-2021-25675 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:28.318Z Vendors: Siemens Products: SIMATIC S7-PLCSIM V5.4 Problem Types: CWE-369 Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause the application to terminate unexpectedly and must be restarted to restore the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa
ce. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE ID: CVE-2021-25676 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:11:27.563Z Vendors: Siemens Products: RUGGEDCOM RM1224, SCALANCE M-800, SCALANCE S615, SCALANCE SC-600 Problem Types: CWE-307 Description: A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf - ht
nalyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02
CVE ID: CVE-2021-25677 State: PUBLISHED Published: 2021-04-22T20:42:21 Last Updated: 2024-08-03T20:11:28.339Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: APOGEE PXC Compact (BACnet), APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (BACnet), APOGEE PXC Modular (P2 Ethernet), Nucleus NET, Nucleus ReadyStart V3, Nucleus ReadyStart V4, Nucleus Source Code, SIMOTICS CONNECT 400, TALON TC Compact (BACnet), TALON TC Modular (BACnet) Problem Types: CWE-330 Description: A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE P
APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not pr
Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf
CVE ID: CVE-2021-25678 State: PUBLISHED Published: 2021-04-22T20:42:21 Last Updated: 2024-08-03T20:11:27.826Z Vendors: Siemens Products: Solid Edge SE2020, Solid Edge SE2021 Problem Types: CWE-787 Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12529) Additional Analyst
d leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12529) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-611/
CVE ID: CVE-2021-25679 State: PUBLISHED Published: 2021-04-20T11:17:27 Last Updated: 2024-08-03T20:11:28.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
ered End of Life and as such this issue will not be patched Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://adtran.com - https://depthsecurity.com/blog/vulnerability-disclosure - https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25679.md - http://packetstormsecurity.com/files/162268/Adtran-Personal-Phone-Manager-10.8.1-Persistent-Cross-Site-Scripting.html
CVE ID: CVE-2021-25680 State: PUBLISHED Published: 2021-04-20T11:17:34 Last Updated: 2024-08-03T20:11:27.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CVE Program Container: References: -
End of Life and as such this issue will not be patched Additional Analyst Notes: - CVE Program Container: References: - http://adtran.com - https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25680.md - http://packetstormsecurity.com/files/162269/Adtran-Personal-Phone-Manager-10.8.1-Cross-Site-Scripting.html