Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31907 State: PUBLISHED Published: 2025-04-03T13:27:17.573Z Last Updated: 2025-04-03T14:17:32.218Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Labib Ahmed Products: Team Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labib Ahmed Team Builder allows Reflected XSS. This issue affects Team Builder: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/team-display/vulnerability/wordpress-team-builder-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=c
in/team-display/vulnerability/wordpress-team-builder-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31908 State: PUBLISHED Published: 2025-04-01T14:52:25.168Z Last Updated: 2025-04-01T16:17:40.825Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sami Ahmed Siddiqui Products: JSON Structuring Markup Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sami Ahmed Siddiqui JSON Structuring Markup allows Stored XSS. This issue affects JSON Structuring Markup: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/json-structuring-markup/vulnerability/wordpress-json-structuring-markup-plugin-0-1-csrf-to-stored-xss-vulnerability?_s_id
son-structuring-markup/vulnerability/wordpress-json-structuring-markup-plugin-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31909 State: PUBLISHED Published: 2025-04-03T13:27:17.836Z Last Updated: 2025-04-03T15:58:44.705Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NotFound Products: Apptivo Business Site CRM Problem Types: CWE-862 Description: Missing Authorization vulnerability in NotFound Apptivo Business Site CRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Apptivo Business Site CRM: from n/a through 5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/apptivo-business-site/vulnerability/wordpress-apptivo-business-site-crm-plugin-5-3-arbitrary-co
atabase/wordpress/plugin/apptivo-business-site/vulnerability/wordpress-apptivo-business-site-crm-plugin-5-3-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31910 State: PUBLISHED Published: 2025-04-01T14:52:25.743Z Last Updated: 2025-04-01T16:15:49.461Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: reputeinfosystems Products: BookingPress Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress allows SQL Injection. This issue affects BookingPress: from n/a through 1.1.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bookingpress-appointment-booking/vulnerability/wordpress-bookingpress-plugin-1-1-28-sql-injection-vuln
/wordpress/plugin/bookingpress-appointment-booking/vulnerability/wordpress-bookingpress-plugin-1-1-28-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31911 State: PUBLISHED Published: 2025-04-03T13:27:18.177Z Last Updated: 2025-04-03T15:49:00.702Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Social Share And Social Locker Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Social Share And Social Locker allows Blind SQL Injection. This issue affects Social Share And Social Locker: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-share-and-social-locker-arsocial/vulnerability/wor
References: - https://patchstack.com/database/wordpress/plugin/social-share-and-social-locker-arsocial/vulnerability/wordpress-social-share-and-social-locker-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31912 State: PUBLISHED Published: 2025-05-23T12:44:04.027Z Last Updated: 2025-05-23T13:35:35.374Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: gavias Products: Enzio - Responsive Business WordPress Theme Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme allows PHP Local File Inclusion. This issue affects Enzio - Responsive Business WordPress Theme: from n/a through 1.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/enz
.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/enzio/vulnerability/wordpress-enzio-responsive-business-wordpress-theme-1-1-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31913 State: PUBLISHED Published: 2025-05-23T12:44:03.548Z Last Updated: 2025-05-23T13:24:39.977Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ApusTheme Products: Ogami Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami allows PHP Local File Inclusion. This issue affects Ogami: from n/a through 1.53. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/ogami/vulnerability/wordpress-ogami-1-53-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31914 State: PUBLISHED Published: 2025-05-23T12:44:03.050Z Last Updated: 2025-05-23T13:25:00.622Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: kamleshyadav Products: Pixel WordPress Form BuilderPlugin & Autoresponder Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder allows Blind SQL Injection. This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpr
a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixel-formbuilder/vulnerability/wordpress-pixel-wordpress-form-builderplugin-autoresponder-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31915 State: PUBLISHED Published: 2025-05-16T15:45:36.671Z Last Updated: 2025-05-16T16:45:25.050Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: kamleshyadav Products: Pixel WordPress Form BuilderPlugin & Autoresponder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder allows Cross Site Request Forgery. This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixel-formbuilder/vulnerability/wo
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixel-formbuilder/vulnerability/wordpress-pixel-wordpress-form-builderplugin-autoresponder-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31916 State: PUBLISHED Published: 2025-05-23T12:44:02.503Z Last Updated: 2025-05-23T13:25:18.366Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: joy2012bd Products: JP Students Result Management System Premium Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in joy2012bd JP Students Result Management System Premium allows Upload a Web Shell to a Web Server. This issue affects JP Students Result Management System Premium: from 1.1.7 through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jp-students-result-system-premium/vu
SA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jp-students-result-system-premium/vulnerability/wordpress-jp-students-result-management-system-premium-plugin-1-1-7-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-31917 State: PUBLISHED Published: 2025-06-09T15:56:34.614Z Last Updated: 2025-06-10T13:35:43.966Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LambertGroup Products: Universal Video Player Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player allows Reflected XSS. This issue affects Universal Video Player: from n/a through 3.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/universal_video_player/vulnerability/wordpress-universal-video-player-plugin-3-8-3-
hstack.com/database/wordpress/plugin/universal_video_player/vulnerability/wordpress-universal-video-player-plugin-3-8-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31918 State: PUBLISHED Published: 2025-05-23T12:44:01.823Z Last Updated: 2025-05-23T13:28:28.106Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: quantumcloud Products: Simple Business Directory Pro Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through 15.4.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-business-directory-pro/vulnerability/wordpress-simple-business-directory-pro-15-4-8-privilege-es
wordpress/plugin/simple-business-directory-pro/vulnerability/wordpress-simple-business-directory-pro-15-4-8-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-31919 State: PUBLISHED Published: 2025-06-17T15:01:37.063Z Last Updated: 2025-06-17T18:36:39.702Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themeton Products: Spare Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in themeton Spare allows Object Injection. This issue affects Spare: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/spare/vulnerability/wordpress-spare-1-7-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31920 State: PUBLISHED Published: 2025-06-09T15:56:33.877Z Last Updated: 2025-06-10T13:36:00.644Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: AmentoTech Products: WP Guppy Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy allows SQL Injection. This issue affects WP Guppy: from n/a through 4.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-guppy/vulnerability/wordpress-wp-guppy-4-3-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31921 State: PUBLISHED Published: 2025-05-16T15:45:36.160Z Last Updated: 2025-05-16T16:45:31.937Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: loopus Products: WP Ultimate Tours Builder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Ultimate Tours Builder allows Cross Site Request Forgery. This issue affects WP Ultimate Tours Builder: from n/a through 1.055. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp_ultimatetoursbuilder/vulnerability/wordpress-wp-ultimate-tours-builder-1-055-cross-site-request-forgery-csrf-vulnerabi
p_ultimatetoursbuilder/vulnerability/wordpress-wp-ultimate-tours-builder-1-055-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31922 State: PUBLISHED Published: 2025-05-16T15:45:35.670Z Last Updated: 2025-05-16T16:45:38.468Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: QuanticaLabs Products: CSS3 Accordions for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress allows Stored XSS. This issue affects CSS3 Accordions for WordPress: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css3_accordions/vulnerability/wordpress-css3-accordions-for-wordpress-plugin-3-0-csrf-to-stored-xss-vulnerability?_s_
in/css3_accordions/vulnerability/wordpress-css3-accordions-for-wordpress-plugin-3-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31923 State: PUBLISHED Published: 2025-05-16T15:45:35.160Z Last Updated: 2025-05-16T16:45:45.983Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: QuanticaLabs Products: CSS3 Accordions for WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CSS3 Accordions for WordPress: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css3_accordions/vulnerability/wordpress-css3-accordions-for-wordpress-3-0
tps://patchstack.com/database/wordpress/plugin/css3_accordions/vulnerability/wordpress-css3-accordions-for-wordpress-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31924 State: PUBLISHED Published: 2025-05-23T12:44:01.125Z Last Updated: 2025-05-23T13:28:47.525Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: designthemes Products: Crafts & Arts Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts allows Object Injection. This issue affects Crafts & Arts: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/crafts-and-arts/vulnerability/wordpress-crafts-arts-2-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31925 State: PUBLISHED Published: 2025-06-09T15:56:32.794Z Last Updated: 2025-06-10T13:36:20.002Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LambertGroup Products: SHOUT Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT allows Reflected XSS. This issue affects SHOUT: from n/a through 3.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lbg-audio8-html5-radio_ads/vulnerability/wordpress-shout-plugin-3-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31926 State: PUBLISHED Published: 2025-05-16T15:45:34.653Z Last Updated: 2025-05-16T16:45:52.917Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: LambertGroup Products: Sticky Radio Player Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player allows SQL Injection. This issue affects Sticky Radio Player: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lbg-audio5-html5-shoutcast_sticky/vulnerability/wordpress-sticky-radio-player-3-4-sql-injectio
database/wordpress/plugin/lbg-audio5-html5-shoutcast_sticky/vulnerability/wordpress-sticky-radio-player-3-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31927 State: PUBLISHED Published: 2025-05-23T12:44:00.642Z Last Updated: 2025-05-23T13:22:55.985Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themeton Products: Acerola Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/acerola/vulnerability/wordpress-acerola-1-6-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31928 State: PUBLISHED Published: 2025-05-16T15:45:34.150Z Last Updated: 2025-05-16T16:18:35.106Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: LambertGroup Products: Multimedia Responsive Carousel with Image Video Audio Support Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support allows SQL Injection. This issue affects Multimedia Responsive Carousel with Image Video Audio Support: from n/a through 2.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchst
Audio Support: from n/a through 2.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/multimedia-carousel/vulnerability/wordpress-multimedia-responsive-carousel-with-image-video-audio-support-2-6-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31929 State: PUBLISHED Published: 2025-05-13T09:38:41.228Z Last Updated: 2025-05-13T15:11:42.040Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Siemens Products: IEC 1Ph 7.4kW Child socket, IEC 1Ph 7.4kW Child socket/ shutter, IEC 1Ph 7.4kW Parent cable 7m, IEC 1Ph 7.4kW Parent cable 7m incl. SIM, IEC 1Ph 7.4kW Parent socket, IEC 1Ph 7.4kW Parent socket incl. SIM, IEC 1Ph 7.4kW Parent socket/ shutter, IEC 1Ph 7.4kW Parent socket/ shutter SIM, IEC 3Ph 22kW Child cable 7m, IEC 3Ph 22kW Child socket, IEC 3Ph 22kW Child socket/ shutter, IEC 3Ph 22kW Parent cable 7m, IEC 3Ph 22kW Parent cable 7m incl. SIM, IEC 3Ph 22kW Parent socket, IEC 3Ph 22
t/ shutter, IEC 3Ph 22kW Parent cable 7m, IEC 3Ph 22kW Parent cable 7m incl. SIM, IEC 3Ph 22kW Parent socket, IEC 3Ph 22kW Parent socket incl. SIM, IEC 3Ph 22kW Parent socket/ shutter, IEC 3Ph 22kW Parent socket/ shutter SIM, IEC ERK 3Ph 22 kW Child cable 7m, IEC ERK 3Ph 22 kW Child socket, IEC ERK 3Ph 22 kW Parent socket, IEC ERK 3Ph 22 kW Parent socket incl. SI, UL Commercial Cellular 48A NTEP, UL Commercial Child 40A w/ 15118 HW, UL Commercial Child 48A BA Compliant, UL Commercial Child 48A w/ 15118 HW, UL Commercial Parent 40A with Simcard, UL Commercial Parent 48A (USPS), UL Commercial Parent 48A BA Compliant, UL Commercial Parent 48A with Simcard BA, UL Commercial Parent 48A, 15118, 25
S), UL Commercial Parent 48A BA Compliant, UL Commercial Parent 48A with Simcard BA, UL Commercial Parent 48A, 15118, 25ft, UL Commercial Parent 48A,15118 25ft Sim, UL Resi High End 40A w/15118 Hw, UL Resi High End 48A w/15118 Hw, VersiCharge Blue™ 80A AC Cellular Problem Types: CWE-1326 Description: A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW
SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent sock
A1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM13
ll versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant
l versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC
F18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-556937.html
CVE ID: CVE-2025-31930 State: PUBLISHED Published: 2025-05-13T09:38:43.000Z Last Updated: 2025-05-13T14:46:55.188Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: IEC 1Ph 7.4kW Child socket, IEC 1Ph 7.4kW Child socket/ shutter, IEC 1Ph 7.4kW Parent cable 7m, IEC 1Ph 7.4kW Parent cable 7m incl. SIM, IEC 1Ph 7.4kW Parent socket, IEC 1Ph 7.4kW Parent socket incl. SIM, IEC 1Ph 7.4kW Parent socket/ shutter, IEC 1Ph 7.4kW Parent socket/ shutter SIM, IEC 3Ph 22kW Child cable 7m, IEC 3Ph 22kW Child socket, IEC 3Ph 22kW Child socket/ shutter, IEC 3Ph 22kW Parent cable 7m, IEC 3Ph 22kW Parent cable 7m incl. SIM, IEC 3Ph 22kW Parent socket, IEC 3Ph 22kW