Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2982 State: PUBLISHED Published: 2012-09-11T18:00:00 Last Updated: 2024-08-06T19:50:05.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf - http://www.kb.cert.org/vuls/id/788478 - https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213 - http://www.securitytracker.com/id?1027507 - http://americaninfosec.com/research/index.html
c3ac03e803cfa7e01515e71a213 - http://www.securitytracker.com/id?1027507 - http://americaninfosec.com/research/index.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-2983 State: PUBLISHED Published: 2012-09-11T18:00:00 Last Updated: 2024-08-06T19:50:05.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field. Additional Analyst Notes: - CVE Program Container: References: - http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf - http://www.kb.cert.org/vuls/id/788478 - http://www.securitytracker.com/id?1027507 - http://americaninfosec.com/research/index.html - https://github.com/webmin/webmin/commit/4cd7bad70e23e4e19be8ccf
27507 - http://americaninfosec.com/research/index.html - https://github.com/webmin/webmin/commit/4cd7bad70e23e4e19be8ccf7b9f245445b2b3b80 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-2984 State: PUBLISHED Published: 2012-08-24T20:00:00 Last Updated: 2024-08-06T19:50:05.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/318779 - http://secunia.com/advisories/50368
CVE ID: CVE-2012-2985 State: PUBLISHED Published: 2012-08-21T10:00:00Z Last Updated: 2024-09-17T00:31:49.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/247235
CVE ID: CVE-2012-2986 State: PUBLISHED Published: 2012-08-20T22:00:00Z Last Updated: 2024-09-16T19:47:19.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/441363
CVE ID: CVE-2012-2990 State: PUBLISHED Published: 2012-08-24T20:00:00Z Last Updated: 2024-09-17T02:41:31.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/663809 - http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=
http://www.kb.cert.org/vuls/id/663809 - http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931
CVE ID: CVE-2012-2991 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T19:50:05.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/459446 - http://secunia.com/advisories/50640
CVE ID: CVE-2012-2993 State: PUBLISHED Published: 2012-09-18T01:00:00 Last Updated: 2025-01-16T21:19:22.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78620 - http://www.securityfocus.com/bid/55569 - http://www.kb.cert.org/vuls/id/389795 - http://osvdb.org/85619 - htt
es/78620 - http://www.securityfocus.com/bid/55569 - http://www.kb.cert.org/vuls/id/389795 - http://osvdb.org/85619 - http://www.securitytracker.com/id?1027541
CVE ID: CVE-2012-2994 State: PUBLISHED Published: 2012-09-18T01:00:00 Last Updated: 2024-08-06T19:50:05.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/591667 - http://secunia.com/advisories/50604
CVE ID: CVE-2012-2995 State: PUBLISHED Published: 2012-09-17T14:00:00 Last Updated: 2024-08-06T19:50:05.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or (2) the src parameter to initUpdSchPage.imss. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027544 - http://www.kb.cert.org/vuls/id/471364 - http://secunia.com/advisories/50620
CVE ID: CVE-2012-2996 State: PUBLISHED Published: 2012-09-17T14:00:00 Last Updated: 2024-08-06T19:50:05.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack the authentication of administrators for requests that create admin accounts via a saveAuth action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027544 - http://www.kb.cert.org/vuls/id/471364 - http://secunia.com/advisories/50620
CVE ID: CVE-2012-2997 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T19:50:05.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0.0 through 10.2.4 and 11.0.0 through 11.2.1 allows remote authenticated users to read arbitrary files via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81426 - http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14138.html - http://osvdb.org/89447 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-0_F5
138.html - http://osvdb.org/89447 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-0_F5_BIG-IP_XML_External_Entity_Injection_v10.txt - http://www.securityfocus.com/bid/57496 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0093.html
CVE ID: CVE-2012-2998 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T19:50:05.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.spentera.com/2012/09/trend-micro-control-manager-sql-injection-vulnerability/ - http://jvndb.jvn.jp/jvndb/JVNDB-2012-000090 - http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_tmcm60_patch1_1449.txt - http://www.s
-000090 - http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_tmcm60_patch1_1449.txt - http://www.securitytracker.com/id?1027584 - http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_TMCM55_1823.txt - http://www.kb.cert.org/vuls/id/950795 - http://esupport.trendmicro.com/solution/en-us/1061043.aspx - http://jvn.jp/en/jp/JVN42014489/index.html
CVE ID: CVE-2012-2999 State: PUBLISHED Published: 2012-10-04T19:00:00 Last Updated: 2024-08-06T19:50:05.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/989684 - http://www.cerberusftp.com/products/releasenotes.html - http://www.securityfocus.com/bid/55
kb.cert.org/vuls/id/989684 - http://www.cerberusftp.com/products/releasenotes.html - http://www.securityfocus.com/bid/55788
CVE ID: CVE-2012-3000 State: PUBLISHED Published: 2014-01-30T15:00:00 Last Updated: 2024-08-06T19:50:05.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51867 - http://osvdb.org/89446 - http://www.securityf
CVE Program Container: References: - http://secunia.com/advisories/51867 - http://osvdb.org/89446 - http://www.securityfocus.com/bid/57500 - http://packetstormsecurity.com/files/119739/F5-BIG-IP-11.2.0-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81457 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-1_F5_BIG-IP_SQL_Injection_v10.txt - http://archives.neohapsis.com/archives/bugtraq/2013-01/0094.html - http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14154.html
CVE ID: CVE-2012-3001 State: PUBLISHED Published: 2012-10-22T16:00:00 Last Updated: 2024-08-06T19:50:05.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/841851 - http://www.securityfocus.com/bid/56165 - http://www.mutiny.com/releasehistory.php - http://secunia.com/advisories/51094 - http://osvdb.org/86570
CVE ID: CVE-2012-3002 State: PUBLISHED Published: 2012-12-21T11:00:00 Last Updated: 2024-08-06T19:50:05.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50966 - http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html - http://www.kb.cert.org/vuls/id/265532 - http://www.foscam.com/help.aspx?TypeId=11 - http://secunia.com/advisories
html - http://www.kb.cert.org/vuls/id/265532 - http://www.foscam.com/help.aspx?TypeId=11 - http://secunia.com/advisories/50950 - http://www.securityfocus.com/bid/55873
CVE ID: CVE-2012-3003 State: PUBLISHED Published: 2012-06-08T18:00:00Z Last Updated: 2024-09-16T19:47:32.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf
CVE ID: CVE-2012-3004 State: PUBLISHED Published: 2012-09-08T10:00:00Z Last Updated: 2024-09-17T03:23:37.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf
CVE ID: CVE-2012-3005 State: PUBLISHED Published: 2012-07-26T10:00:00Z Last Updated: 2024-09-17T03:58:58.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf
CVE ID: CVE-2012-3006 State: PUBLISHED Published: 2012-06-19T18:00:00Z Last Updated: 2024-09-16T23:11:27.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value. Additional Analyst Notes: - CVE Program Container: References: - https://freedom-to-tinker.com/blog/nadiah/new-researc
. Additional Analyst Notes: - CVE Program Container: References: - https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs - http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf
CVE ID: CVE-2012-3007 State: PUBLISHED Published: 2012-07-05T01:00:00 Last Updated: 2024-08-06T19:50:05.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49
a long Unicode string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49173 - http://www.securityfocus.com/bid/53563 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf
CVE ID: CVE-2012-3008 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-06T19:50:05.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77131 - http://osvdb.org/84091 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf - http://secunia.com/advisories/49986 - http://www.securityfocus.com/bid/54609
CVE ID: CVE-2012-3009 State: PUBLISHED Published: 2012-08-16T10:00:00Z Last Updated: 2024-09-17T03:53:34.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf
CVE ID: CVE-2012-3010 State: PUBLISHED Published: 2012-11-01T10:00:00 Last Updated: 2024-08-06T19:50:05.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55935 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf - http://support.ge-ip.c
www.securityfocus.com/bid/55935 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050 - http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf
CVE ID: CVE-2012-3011 State: PUBLISHED Published: 2012-09-25T10:00:00 Last Updated: 2024-08-06T19:50:05.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50668 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-262-01.pdf
CVE ID: CVE-2012-3012 State: PUBLISHED Published: 2012-09-05T20:00:00Z Last Updated: 2024-09-17T03:54:50.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer, as demonstrated by a port scan. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-01.pdf - http://www.arbiter.com/news/index.php?id=261
CVE ID: CVE-2012-3013 State: PUBLISHED Published: 2012-09-07T00:00:00Z Last Updated: 2024-09-16T20:17:46.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf
CVE ID: CVE-2012-3014 State: PUBLISHED Published: 2012-09-04T10:00:00Z Last Updated: 2024-09-17T00:40:44.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf
CVE ID: CVE-2012-3015 State: PUBLISHED Published: 2012-07-26T10:00:00Z Last Updated: 2024-09-16T19:31:37.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf
CVE ID: CVE-2012-3016 State: PUBLISHED Published: 2012-07-31T10:00:00 Last Updated: 2024-08-06T19:50:05.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-589272.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-589272.pdf
CVE ID: CVE-2012-3017 State: PUBLISHED Published: 2012-07-31T10:00:00 Last Updated: 2024-08-06T19:50:05.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-617264.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-617264.pdf
CVE ID: CVE-2012-3018 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-16T19:57:03.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf