Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2227 State: PUBLISHED Published: 2014-07-25T19:00:00 Last Updated: 2024-08-06T10:06:00.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/128 - http://sethsec.blogspot.com/2014/07/cve-2014-2227.html - http://www.securityfocus.com/bid/68866
CVE ID: CVE-2014-2228 State: PUBLISHED Published: 2020-02-19T13:20:41 Last Updated: 2024-08-06T10:06:00.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20140425095352/http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Remote-code-execution-and-XML-Entity-Expansion-injection/ba-p/6403370
CVE ID: CVE-2014-2230 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T10:06:00.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97621 - http://seclists.org/fulldisclosure/2014/Oct/7
erability-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97621 - http://seclists.org/fulldisclosure/2014/Oct/72 - http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
CVE ID: CVE-2014-2231 State: PUBLISHED Published: 2014-02-27T15:00:00Z Last Updated: 2024-09-16T20:07:47.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56931 - http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=141
CVE ID: CVE-2014-2232 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T10:05:59.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.christian-schneider.net/advisories/CVE-2014-2232.txt - http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp - http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
CVE ID: CVE-2014-2233 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T10:05:59.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.christian-schneider.net/advisories/CVE-2014-2233.txt - http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp - http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
CVE ID: CVE-2014-2234 State: PUBLISHED Published: 2014-03-05T02:00:00 Last Updated: 2024-08-06T10:06:00.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent (TEA) feature without terminating certain TLS/SSL handshakes as specified in the SSL_CTX_set_verify callback function's documentation, which allows remote attackers to bypass extra verification within a custom application via a crafted certificate chain that is acceptable to TEA but not acceptable to that application. Additional Analyst Notes: - CVE Program Container: References: - https://hynek.me/articles/apple-openssl-verificati
ion. Additional Analyst Notes: - CVE Program Container: References: - https://hynek.me/articles/apple-openssl-verification-surprises/
CVE ID: CVE-2014-2235 State: PUBLISHED Published: 2014-03-05T15:00:00 Last Updated: 2024-08-06T10:05:59.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57163 - https://github.com/ASKBOT/askbot-devel/commit/876e3662ff6b78cc6241338c15e3a0cb49edf4e2 - http://www.securityfocus.com/bid/65885 - https://bugzilla.redhat.com/show_bug.cgi?id=1070852 - http://www.openwall.com/lists/oss-security/2014/02/28/8
CVE ID: CVE-2014-2236 State: PUBLISHED Published: 2014-03-05T15:00:00 Last Updated: 2024-08-06T10:05:59.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57163 - https://github.com/ASKBOT/askbot-devel/commit/876e3662ff6b78cc6241338c15e3a0cb49edf4e2#diff-b693b4c02739be4b3231bece15b0eb87 - http://www.securityfocus.com/bid/65885 - https://github.com/ASKBOT/askbot-devel/commit/a676a86b6b7a5737
31bece15b0eb87 - http://www.securityfocus.com/bid/65885 - https://github.com/ASKBOT/askbot-devel/commit/a676a86b6b7a5737d4da4f59f71e037406f88d29 - https://bugzilla.redhat.com/show_bug.cgi?id=1070852 - http://www.openwall.com/lists/oss-security/2014/02/28/8
CVE ID: CVE-2014-2237 State: PUBLISHED Published: 2014-04-01T01:00:00 Last Updated: 2024-08-06T10:06:00.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/04/16 - http://www.
yst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/04/16 - http://www.securityfocus.com/bid/65895 - https://bugs.launchpad.net/keystone/+bug/1260080 - http://rhn.redhat.com/errata/RHSA-2014-0580.html
CVE ID: CVE-2014-2238 State: PUBLISHED Published: 2014-03-05T15:00:00 Last Updated: 2024-08-06T10:06:00.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/456 - http://seclists.org/oss-sec/2014/q1/490 - http://www.securityfocus.com/bid/65903 - http://mantisbt.domainunion.de/bugs/view.php?id=17055 - http://www.mantisbt.org/blog/?p=288 - https://exchange
d/65903 - http://mantisbt.domainunion.de/bugs/view.php?id=17055 - http://www.mantisbt.org/blog/?p=288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91563
CVE ID: CVE-2014-2240 State: PUBLISHED Published: 2014-03-12T14:00:00 Last Updated: 2024-08-06T10:05:59.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57291 - http://www.securitytracker.com/id/1029895 - http://www.ubuntu.com/usn/USN-2148-1 - http://secunia.com/advisories/57447 - http://www.freetype.org/index.html - http://savannah.nong
ntu.com/usn/USN-2148-1 - http://secunia.com/advisories/57447 - http://www.freetype.org/index.html - http://savannah.nongnu.org/bugs/?41697 - http://sourceforge.net/projects/freetype/files/freetype2/2.5.3 - http://www.securityfocus.com/bid/66074
CVE ID: CVE-2014-2241 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T10:06:00.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=135c3faebb96f8f550bd4f318716f2e1e095a969 - http://www.ubuntu.com/usn/USN-2148-1 - http://secunia.com/advisories/5744
?id=135c3faebb96f8f550bd4f318716f2e1e095a969 - http://www.ubuntu.com/usn/USN-2148-1 - http://secunia.com/advisories/57447 - http://savannah.nongnu.org/bugs/?41697 - http://www.openwall.com/lists/oss-security/2014/03/12/4
CVE ID: CVE-2014-2242 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:06:00.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 does not prevent use of invalid namespaces in SVG files, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an SVG upload, as demonstrated by use of a W3C XHTML namespace in conjunction with an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65910 - http://openwall.com/lists/oss-security/2014/02/28/1 - https://gerrit.
rences: - http://www.securityfocus.com/bid/65910 - http://openwall.com/lists/oss-security/2014/02/28/1 - https://gerrit.wikimedia.org/r/#/q/7d923a6b53f7fbcb0cbc3a19797d741bf6f440eb%2Cn%2Cz - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-February/000141.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=60771 - http://openwall.com/lists/oss-security/2014/03/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1071135
CVE ID: CVE-2014-2243 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:06:00.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timing differences in responses to incorrect token guesses. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/02/28/1 - https://bugzilla.wikimedia.org/show_bug.cgi?id=61346 - http:/
s: - http://openwall.com/lists/oss-security/2014/02/28/1 - https://bugzilla.wikimedia.org/show_bug.cgi?id=61346 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-February/000141.html - https://bugzilla.redhat.com/show_bug.cgi?id=1071136 - http://openwall.com/lists/oss-security/2014/03/01/2 - https://gerrit.wikimedia.org/r/#/q/I2a9e89120f7092015495e638c6fa9f67adc9b84f%2Cn%2Cz
CVE ID: CVE-2014-2244 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T10:06:00.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 allows remote attackers to inject arbitrary web script or HTML via a crafted string located after http:// in the text parameter to api.php. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/02/28/1 - http://www.securityfocus.com/bid/65906 - http://lists.wikimedia.org/pipermail/mediaw
m/lists/oss-security/2014/02/28/1 - http://www.securityfocus.com/bid/65906 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-February/000141.html - https://gerrit.wikimedia.org/r/#/q/Idf985e4e69c2f11778a8a90503914678441cb3fb%2Cn%2Cz - https://bugzilla.wikimedia.org/show_bug.cgi?id=61362 - http://openwall.com/lists/oss-security/2014/03/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1071139
CVE ID: CVE-2014-2245 State: PUBLISHED Published: 2014-03-05T15:00:00 Last Updated: 2024-08-06T10:05:59.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56996 - http://www.securityfocus.com/bid/65953 - http://dev.cmsmadesimple.org/project/changelog/4602 - http://seclists.o
56996 - http://www.securityfocus.com/bid/65953 - http://dev.cmsmadesimple.org/project/changelog/4602 - http://seclists.org/oss-sec/2014/q1/467
CVE ID: CVE-2014-2246 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66201 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productc
visory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2247 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2248 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://www.securityfocus.com/bid/66190 - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.si
http://www.securityfocus.com/bid/66190 - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2249 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:05:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-
rity_advisory_ssa-456423.pdf - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf
CVE ID: CVE-2014-2250 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:06:00.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 -
l/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf
CVE ID: CVE-2014-2251 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert
ory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2252 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:06:00.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted PROFINET packets, a different vulnerability than CVE-2014-2253. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf
CVE ID: CVE-2014-2253 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2254 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:06:00.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets, a different vulnerability than CVE-2014-2255. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf
CVE ID: CVE-2014-2255 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:05:59.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2256 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:06:00.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf
CVE ID: CVE-2014-2257 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T10:06:00.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf
CVE ID: CVE-2014-2258 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:06:00.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different vulnerability than CVE-2014-2259. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf