Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11851 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T17:25:26.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sierrawireless.com/company/security/ - http://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2021-001.ashx
CVE ID: CVE-2019-11852 State: PUBLISHED Published: 2020-08-21T18:45:59.665863Z Last Updated: 2024-09-16T23:06:33.468Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11853 State: PUBLISHED Published: 2020-08-21T18:52:01.995577Z Last Updated: 2024-09-17T03:54:16.087Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11855 State: PUBLISHED Published: 2020-08-21T18:47:34.704020Z Last Updated: 2024-09-16T22:50:50.946Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11856 State: PUBLISHED Published: 2020-08-21T18:49:52.067067Z Last Updated: 2024-09-17T01:40:47.226Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11857 State: PUBLISHED Published: 2020-08-21T18:50:43.244269Z Last Updated: 2024-09-16T22:14:59.812Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11858 State: PUBLISHED Published: 2020-08-21T18:52:42.341708Z Last Updated: 2024-09-16T20:22:41.359Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11859 State: PUBLISHED Published: 2020-08-21T18:51:24.897657Z Last Updated: 2024-09-16T16:22:36.638Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/
CVE ID: CVE-2019-11862 State: PUBLISHED Published: 2020-08-21T18:53:37.794748Z Last Updated: 2024-09-16T22:08:27.107Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-004/
CVE ID: CVE-2019-11867 State: PUBLISHED Published: 2020-02-12T17:25:20 Last Updated: 2024-08-04T23:03:33.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user space, which the driver assumes has a size greater than zero bytes. To exploit this vulnerability, an attacker must send an IRP with a system buffer size of 0. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html - https://www.realtek.cz/realtek-network-drivers.html
CVE ID: CVE-2019-11868 State: PUBLISHED Published: 2019-07-29T16:28:32 Last Updated: 2024-08-04T23:03:32.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SoftEtherVPN/SoftEtherVPN/tree/master/src/See - https://downwithup.github.io/CVEPosts - https://www.softether.org/9-about/News/900-SEVPN201901
CVE ID: CVE-2019-11869 State: PUBLISHED Published: 2019-05-09T21:24:59 Last Updated: 2024-08-04T23:03:32.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenly expects that is_admin() verifies that the request comes from an admin user (it actually only verifies that the request is for an admin page). An unauthenticated attacker can inject a payload into the plugin settings, such as the yuzo_related_post_css_and_style setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9254 - https://www.wordfence.com/blog/2019/04/yuzo-related-posts-zero-day-vul
es: - https://wpvulndb.com/vulnerabilities/9254 - https://www.wordfence.com/blog/2019/04/yuzo-related-posts-zero-day-vulnerability-exploited-in-the-wild/ - https://www.pluginvulnerabilities.com/2019/03/30/wordpress-plugin-team-paints-target-on-exploitable-settings-change-vulnerability-that-permits-persistent-xss-in-related-posts/
CVE ID: CVE-2019-11870 State: PUBLISHED Published: 2019-05-09T21:25:09 Last Updated: 2024-08-04T23:03:32.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature. Additional Analyst Notes: - CVE Program Container: References: - https://blog.s9y.org/archives/282-Serendipity-2.1.5-released.html - https://www.openwall.com/lists/oss-security/2019/05/03/3 - https://github.com/s9y/Serendipity/issues/598 - http://www.openwall.com/lists/oss-security/2019/05/10/1
CVE ID: CVE-2019-11871 State: PUBLISHED Published: 2019-05-10T02:58:09 Last Updated: 2024-08-04T23:03:32.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-field-suite/#developers - https://blog.reddy.io/2019/05/30/xss-injection-vulnerability-in-custom-field-suite-wordpress-plugin/ - https://wpvulndb.com/vulnerabilities/9273
CVE ID: CVE-2019-11872 State: PUBLISHED Published: 2019-05-29T18:15:52 Last Updated: 2024-08-04T23:03:32.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window. Successful exploitation grants an attacker with a right to execute malicious code on the administrator's computer through Excel functions as the plugin does not sanitize the user's input and allows insertion of any text. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-popup/#developers - https://blog.reddy.io/category
gram Container: References: - https://wordpress.org/plugins/wordpress-popup/#developers - https://blog.reddy.io/category/cybersecurity/ - https://blog.reddy.io/2019/05/24/reddy-solutions-found-a-csv-injection-vulnerability-in-hustle-wordpress-plugin/ - https://wpvulndb.com/vulnerabilities/9326
CVE ID: CVE-2019-11873 State: PUBLISHED Published: 2019-05-23T12:54:46 Last Updated: 2024-08-04T23:03:32.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length, total extensions length, PSK extension length, total identity length, and identity length contain their maximum value which is 2^16. The identity data field of the PSK extension of the packet contains the attack data, to be stored in
alue which is 2^16. The identity data field of the PSK extension of the packet contains the attack data, to be stored in the undefined memory (RAM) of the server. The size of the data is about 65 kB. Possibly the attacker can perform a remote code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842 - https://www.telekom.com/resource/blob/572524/1c89c1cbaccdf792153063b3a10af10e/dl-190515-remote-buffer-overflow-vulnerability-wolfssl-library-data.pdf - http://www.securityfocus.com/bid/108466
CVE ID: CVE-2019-11875 State: PUBLISHED Published: 2019-05-24T15:55:31 Last Updated: 2024-08-04T23:03:32.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user account to connect to the Blue Prism server, but the roles associated to this account are not required to have any permissions. First of all, the application files are modified to grant full permissions on the client side. In a test envi
rmissions. First of all, the application files are modified to grant full permissions on the client side. In a test environment (or his own instance of the software) an attacker is able to grant himself full privileges also on the server side. He can then, for instance, create a process with malicious behavior and export it to disk. With the modified client, it is possible to import the exported file as a release and overwrite any existing process in the database. Eventually, the bots execute the malicious process. The server does not check the user's permissions for the aforementioned actions, such that a modification of the client software enables this kind of attack. Possible scenarios ma
orementioned actions, such that a modification of the client software enables this kind of attack. Possible scenarios may involve changing bank accounts or setting passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-002.txt - http://packetstormsecurity.com/files/153007/Blue-Prism-Robotic-Process-Automation-RPA-Privilege-Escalation.html
CVE ID: CVE-2019-11876 State: PUBLISHED Published: 2019-05-24T15:48:30 Last Updated: 2024-08-04T23:03:33.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases/ - https://www.logicallysecure.com/blog/xss-presta-xss-drupal/
CVE ID: CVE-2019-11877 State: PUBLISHED Published: 2019-06-10T16:27:31 Last Updated: 2024-08-04T23:03:33.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID. Additional Analyst Notes: - CVE Program Container: References: - http://www.pix-link.com/page50?product_id=144 - https://medium.com/%40igor.lrgomes/cve-2019-11877-credentials-stealing-through-xss-on-pix-link-repeater-9a98c344f58e
CVE ID: CVE-2019-11878 State: PUBLISHED Published: 2019-05-10T14:24:36 Last Updated: 2024-08-04T23:03:32.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds. Additional Analyst Notes: - CVE Program Container: References: - http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html - https://www.youtube.com/watch?v=SnyPJ
- http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html - https://www.youtube.com/watch?v=SnyPJtDDMFQ
CVE ID: CVE-2019-11879 State: PUBLISHED Published: 2019-05-10T16:00:31 Last Updated: 2024-08-04T23:03:32.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory. NOTE: The vendor states that this is analogous to Options FollowSymlinks in the Apache HTTP Server, and therefore it is "not a problem. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ruby-lang.org/issues/15835
CVE ID: CVE-2019-11880 State: PUBLISHED Published: 2019-05-22T15:47:20 Last Updated: 2024-08-04T23:10:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.commsy.net - http://packetstormsecurity.com/files/152910/CommSy-8.6.5-SQL-Injection.html
CVE ID: CVE-2019-11881 State: PUBLISHED Published: 2019-06-10T19:35:43 Last Updated: 2024-12-04T14:17:22.229317 Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message. Additional Analyst Notes: - CVE Program Container: References: - https
ttps://malicious.rancher.site/upgrading" message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MauroEldritch/VanCleef - https://github.com/rancher/rancher/issues/20216 - https://github.com/rancher/rancher/commit/e59adbc7565251919d84d6e353421104be8da06e - https://github.com/rancher/rancher/blob/v2.2.4/pkg/auth/providers/saml/saml_client.go#L282
CVE ID: CVE-2019-11884 State: PUBLISHED Published: 2019-05-10T21:53:01 Last Updated: 2024-08-04T23:10:29.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.15 - https://github.com/torvalds/linux/commit/a1616a5ac99ede5d605047a9012481ce7ff18b16 - https://git.kernel.org/cgit/linux/kernel/git/torval
com/torvalds/linux/commit/a1616a5ac99ede5d605047a9012481ce7ff18b16 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1616a5ac99ede5d605047a9012481ce7ff18b16 - http://www.securityfocus.com/bid/108299 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAYXGGJUUYPOMCBZGGDCUZFLUU3JOZG5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF2PDXUGOFEOTPVEACKFIHQB6O4XUIZD/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPWHQHNM2MSGO3FDJVIQXQNKYVR7TV4
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPWHQHNM2MSGO3FDJVIQXQNKYVR7TV45/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26 - https://usn.ubuntu.com/4068-1/ - https://usn.ubuntu.com/4068-2/ - https://usn.ubuntu.com/4069-1/ - https://usn.ubuntu.com/4076-1/ - https://usn.ubuntu.com/4069-2/ - https://usn.ubuntu.com/4118
//usn.ubuntu.com/4069-1/ - https://usn.ubuntu.com/4076-1/ - https://usn.ubuntu.com/4069-2/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-11885 State: PUBLISHED Published: 2019-05-12T13:55:14 Last Updated: 2024-08-04T23:10:29.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0 00 00 00 00 00 00 SCSI command. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/eyedisk-hacking-the-unhackable-again/
CVE ID: CVE-2019-11886 State: PUBLISHED Published: 2019-05-13T04:03:16 Last Updated: 2024-08-04T23:10:29.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9256 - https://wordpress.org/plugins/yellow-pencil-visual-theme-customizer/#developers - https://www.wordfence.com/blog/2019/04/zero-day-vulnerability-in-yellow-pencil-visual-theme-customizer-exploited-in-the-wild/ - h
ww.wordfence.com/blog/2019/04/zero-day-vulnerability-in-yellow-pencil-visual-theme-customizer-exploited-in-the-wild/ - https://www.pluginvulnerabilities.com/2019/04/09/recently-closed-visual-css-style-editor-wordpress-plugin-contains-privilege-escalation-vulnerability-that-leads-to-option-update-vulnerability/
CVE ID: CVE-2019-11887 State: PUBLISHED Published: 2019-05-17T16:53:10 Last Updated: 2024-08-04T23:10:29.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://news.simplybook.me/notification/
CVE ID: CVE-2019-11888 State: PUBLISHED Published: 2019-05-13T04:30:21 Last Updated: 2024-08-04T23:10:29.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://go-review.googlesource.com/c/go/+/176619
CVE ID: CVE-2019-11889 State: PUBLISHED Published: 2019-07-09T12:36:01 Last Updated: 2024-08-04T23:10:29.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV. Additional Analyst Notes: - CVE Program Container: References: - https://www.first.org/members/teams/sony_psirt - http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html - https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/ - http://seclists.org/fulldisclosure/2019/Jul/8
CVE ID: CVE-2019-11890 State: PUBLISHED Published: 2019-07-09T12:42:13 Last Updated: 2024-08-04T23:10:29.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN. Additional Analyst Notes: - CVE Program Container: References: - https://www.first.org/members/teams/sony_psirt - http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html - https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/ - http://seclists.org/fulldisclosure/2019/Jul/8
CVE ID: CVE-2019-11891 State: PUBLISHED Published: 2019-05-29T19:40:01.253370Z Last Updated: 2024-09-16T18:13:51.172Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-266 Description: A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the SHC during the attack. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-6
the attack. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html