Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3325 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T15:37:11.798Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/360819 - h
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/360819 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3325.json
CVE ID: CVE-2022-3326 State: PUBLISHED Published: 2022-09-28T23:45:11.000Z Last Updated: 2025-05-20T20:22:37.090Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-521 Description: Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97 - https://github.com/ikus060/rdiffweb/commit/ee98e5af78ec60db8a17fef6ea0ca250e3f31eec
CVE ID: CVE-2022-3327 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:18:42.591Z Severity: MEDIUM (CVSS 4.5 CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: ikus060 Products: ikus060/rdiffweb Problem Types: CWE-306 Description: Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1 - https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095
CVE ID: CVE-2022-3328 State: PUBLISHED Published: 2024-01-08T18:04:10.534Z Last Updated: 2025-06-03T14:35:04.952Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: snapd Description: Race condition in snap-confine's must_mkdir_and_open_with_perms() Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328 - https://ubuntu.com/security/notices/USN-5753-1
CVE ID: CVE-2022-3330 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:17:58.974Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/365827 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3330.json
CVE ID: CVE-2022-3331 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:19:13.396Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Authorization bypass through user-controlled key in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues. Additional Analyst Notes: - CVE Program Container: -
hat may be exploited by an attacker to leak Zentao project issues. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/360372 - https://hackerone.com/reports/1542834 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3331.json
CVE ID: CVE-2022-3332 State: PUBLISHED Published: 2022-09-28T04:35:11.000Z Last Updated: 2025-04-15T13:46:55.704Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-707 Description: A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vul
the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-209583. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vuls/vuls/blob/main/Food%20Ordering%20Management%20System%20router.php%20SQL%20Injection.pdf - https://vuldb.com/?id.209583
CVE ID: CVE-2022-3333 State: PUBLISHED Published: 2022-09-28T04:35:12.000Z Last Updated: 2025-04-15T13:46:47.321Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Zephyr Products: Project Manager Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.2.5 is able to address this issue. It is recommended to upgrade the affected component.
remotely. Upgrading to version 3.2.5 is able to address this issue. It is recommended to upgrade the affected component. VDB-209370 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bfd8a7aa-5977-4fe5-b2fc-12bf93caf3ed - https://vuldb.com/?id.209370
CVE ID: CVE-2022-3334 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T15:42:13.352Z Vendors: Unknown Products: Easy WP SMTP Problem Types: CWE-502 Description: The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0e735502-eaa2-4047-949e-bc8eb6b39fc9
CVE ID: CVE-2022-3335 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T19:04:09.994Z Vendors: Unknown Products: Kadence WooCommerce Email Designer Problem Types: CWE-502 Description: The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/39514705-c887-4a02-a77b-36e1dcca8f5d
CVE ID: CVE-2022-3336 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T13:24:20.760Z Vendors: Unknown Products: Event Monster Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57bc6633-1aeb-4c20-a2a5-9b3fa10ba95d
CVE ID: CVE-2022-3337 State: PUBLISHED Published: 2022-10-28T09:25:31.596Z Last Updated: 2025-05-06T17:41:15.374Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L) Vendors: Cloudflare Products: WARP Problem Types: CWE-862 Description: It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch feature being enabled on Zero Trust Platform. This led to bypassing policies and restrictions enforced for enrolled devices by the Zero Trust platform. Additional Analyst Notes: - CVE Program Container: - CIS
tions enforced for enrolled devices by the Zero Trust platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-vr93-4vx7-332p
CVE ID: CVE-2022-3338 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:46:25.750Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Trellix Products: Trellix ePolicy Orchestrator (ePO) Problem Types: CWE-611 Description: An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.tr
hrough the API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10387
CVE ID: CVE-2022-3339 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-08T17:24:54.809Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Trellix Products: Trellix ePolicy Orchestrator (ePO) Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO. Additional Analyst Notes: -
imited access to sensitive information and limited ability to alter some information in ePO. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10387
CVE ID: CVE-2022-3340 State: PUBLISHED Published: 2022-11-04T00:00:00.000Z Last Updated: 2025-04-30T14:33:30.018Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Trellix Products: Trellix IPS Manager Problem Types: CWE-611 Description: XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10388
CVE ID: CVE-2022-3341 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T15:56:52.766Z Vendors: n/a Products: FFmpeg Problem Types: CWE-476 Description: A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2157054 - https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a13949
zilla.redhat.com/show_bug.cgi?id=2157054 - https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a1394951e - https://lists.debian.org/debian-lts-announce/2023/06/msg00016.html
CVE ID: CVE-2022-3342 State: PUBLISHED Published: 2023-10-20T07:29:24.289Z Last Updated: 2024-09-16T17:46:13.716Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: automattic Products: Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to, and including, 5.3.1. While the function performs a nonce check, steps 2 and 3 of the check do not take any action upon a failed check. These steps then per
tion performs a nonce check, steps 2 and 3 of the check do not take any action upon a failed check. These steps then perform a 'file_exists' check on the value of 'zbscrmcsvimpf'. If a phar:// archive is supplied, its contents will be deserialized and an object injected in the execution stream. This allows an unauthenticated attacker to obtain object injection if they are able to upload a phar archive (for instance if the site supports image uploads) and then trick an administrator into performing an action, such as clicking a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/98ab264f-b210
ontainer: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/98ab264f-b210-41d0-bb6f-b4f31d933f80?source=cve - https://plugins.trac.wordpress.org/browser/zero-bs-crm/trunk/includes/ZeroBSCRM.CSVImporter.php?rev=2790863 - https://plugins.trac.wordpress.org/changeset/2805282/zero-bs-crm/trunk/includes/ZeroBSCRM.CSVImporter.php
CVE ID: CVE-2022-3343 State: PUBLISHED Published: 2023-01-09T22:13:27.335Z Last Updated: 2025-04-09T19:21:25.003Z Vendors: Unknown Products: WPQA Builder, Discy, Himer Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan
ctions to them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e507b1b5-1a56-4b2f-b7e7-e22f6da1e32a
CVE ID: CVE-2022-3344 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T14:17:21.111Z Vendors: n/a Products: Linux kernel Problem Types: CWE-440 Description: A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/lkml/20221020093055.224317-5-mlevitsk%40redhat.com/T/ - https://bugzilla.redhat.com/show_bug.cgi?id=2130278
CVE ID: CVE-2022-3346 State: PUBLISHED Published: 2022-12-27T21:17:48.222Z Last Updated: 2025-04-14T17:06:12.574Z Vendors: github.com/peterzen/goresolver Products: github.com/peterzen/goresolver Problem Types: CWE 347: Improper Verification of Cryptographic Signature Description: DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github
y other domain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peterzen/goresolver/issues/5 - https://pkg.go.dev/vuln/GO-2022-0979
CVE ID: CVE-2022-3347 State: PUBLISHED Published: 2022-12-27T21:17:52.067Z Last Updated: 2025-04-14T17:08:49.781Z Vendors: github.com/peterzen/goresolver Products: github.com/peterzen/goresolver Problem Types: CWE 295: Improper Certificate Validation Description: DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peterzen/goresolver/issues/5#issuecomment-11502142
Container: - CISA ADP Vulnrichment: References: - https://github.com/peterzen/goresolver/issues/5#issuecomment-1150214257 - https://pkg.go.dev/vuln/GO-2022-1026
CVE ID: CVE-2022-3348 State: PUBLISHED Published: 2022-09-28T08:40:09.000Z Last Updated: 2025-05-21T14:15:29.849Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: tooljet Products: tooljet/tooljet Problem Types: CWE-200 Description: Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/aae4aeb8-2612-4254-85e5-90675b082eac - https://github.com/tooljet/tooljet/commit/37bf6de75f161e03c2a81888810
ev/bounties/aae4aeb8-2612-4254-85e5-90675b082eac - https://github.com/tooljet/tooljet/commit/37bf6de75f161e03c2a81888810488b913863a46
CVE ID: CVE-2022-3349 State: PUBLISHED Published: 2022-09-28T12:35:09.000Z Last Updated: 2025-04-15T13:46:38.482Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sony Products: PS4, PS5 Problem Types: CWE-119 Description: A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679. Additional Analyst Notes
upgrade the affected component. The associated identifier of this vulnerability is VDB-209679. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1340942 - https://vuldb.com/?id.209679
CVE ID: CVE-2022-3350 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-09T19:06:01.183Z Vendors: Unknown Products: Contact Bank – Contact Form Builder for WordPress Problem Types: CWE-79 Description: The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6d796b83-03c0-49f8-8d07-5c63ce8a32b9
CVE ID: CVE-2022-3351 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T20:23:01.453Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A user's primary email may be disclosed to an attacker through group member events webhooks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/364266 - https://hackerone.com/reports/1446022 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3351.json
CVE ID: CVE-2022-3352 State: PUBLISHED Published: 2022-09-29T00:00:00.000Z Last Updated: 2025-05-20T20:17:40.967Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 9.0.0614. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d058f182-a49b-40c7-9234-43d4c5a29f60 - https://github.com/vim/vim/commit/ef976323e770315b5fca544efb6b2faa25674d15 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/ - https://lists.fedor
CVE ID: CVE-2022-3353 State: PUBLISHED Published: 2023-02-21T13:50:46.145Z Last Updated: 2025-03-12T15:17:11.275Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: FOX61x TEGO1, GMS600, ITT600 SA Explorer, MicroSCADA X SYS600, MSM, PWC600, REB500, Relion® 670, Relion® 650, SAM600-IO, RTU500, TXpert Hub CoreTec 4, TXpert Hub CoreTec 5 Problem Types: CWE-404 Description: A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting
by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to stop accepting new MMS-client connections. Already existing/established client-server connections are not affected. List of affected CPEs: * cpe:2.3:o:hitachienergy:fox61x_tego1:r15b08:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16_3:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r2a16:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1e01:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1d02:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*
:r1c07:*:*:*:*:*:*:* * cpe:2.3:o:hitachienergy:fox61x_tego1:r1b02:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:gms600:1.3.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.1.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.5.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.6.0.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.7.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:1.8.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer:2.0.*:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:itt600_sa_explorer: