Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31739 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T13:52:46.926Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Attacker-influenced path traversal when saving downloaded files Description: When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Conta
ility affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://www.mozilla.org/security/advisories/mfsa2022-21/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1765049
CVE ID: CVE-2022-31740 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T13:51:26.258Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Register allocation problem in WASM on arm64 Description: On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - htt
ttps://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://www.mozilla.org/security/advisories/mfsa2022-21/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1766806
CVE ID: CVE-2022-31741 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:59:56.451Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Uninitialized variable leads to invalid memory read Description: A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://w
/www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://www.mozilla.org/security/advisories/mfsa2022-21/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1767590
CVE ID: CVE-2022-31742 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:36:35.842Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information Description: An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles. This could have led to cross-origin account linking in violation of WebAuthn goals. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst No
thn goals. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://www.mozilla.org/security/advisories/mfsa2022-21/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730434
CVE ID: CVE-2022-31743 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:30:35.379Z Vendors: Mozilla Products: Firefox Problem Types: HTML Parsing incorrectly ended HTML comments prematurely Description: Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1747388
CVE ID: CVE-2022-31744 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:29:18.743Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: CSP bypass enabling stylesheet injection Description: An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisor
hment: References: - https://www.mozilla.org/security/advisories/mfsa2022-26/ - https://www.mozilla.org/security/advisories/mfsa2022-25/ - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1757604
CVE ID: CVE-2022-31745 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:26:21.666Z Vendors: Mozilla Products: Firefox Problem Types: Incorrect Assertion caused by unoptimized array shift operations Description: If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox < 101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1760944
CVE ID: CVE-2022-31746 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:24:39.294Z Vendors: Mozilla Products: Firefox for iOS Problem Types: Privileged internal URL protection could be bypassed through referrer header. Description: Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-27/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1654416
CVE ID: CVE-2022-31747 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:22:41.330Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 Description: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - C
e. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://www.mozilla.org/security/advisories/mfsa2022-22/ - https://www.mozilla.org/security/advisories/mfsa2022-21/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734
CVE ID: CVE-2022-31748 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T18:21:29.494Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 101 Description: Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/securi
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-20/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1713773%2C1762201%2C1762469%2C1762770%2C1764878%2C1765226%2C1765782%2C1765973%2C1767177%2C1767181%2C1768232%2C1768251%2C1769869
CVE ID: CVE-2022-31749 State: PUBLISHED Published: 2025-01-27T23:28:40.596Z Last Updated: 2025-01-28T15:18:35.068Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WatchGuard Products: Fireware OS Problem Types: CWE-88 Description: An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM appliances Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2022/06/23/cve-2022-31749-watchgu
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2022/06/23/cve-2022-31749-watchguard-authenticated-arbitrary-file-read-write-fixed/ - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00019
CVE ID: CVE-2022-31751 State: PUBLISHED Published: 2022-06-13T14:55:41 Last Updated: 2024-08-03T07:26:01.118Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Multi-thread contention vulnerability Description: The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482 - https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE ID: CVE-2022-31752 State: PUBLISHED Published: 2022-06-13T15:07:45 Last Updated: 2024-08-03T07:26:01.101Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Missing authorization vulnerability Description: Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2022-31753 State: PUBLISHED Published: 2022-06-13T15:06:07 Last Updated: 2024-08-03T07:26:01.119Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Weaknesses Introduced During Design Description: The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31754 State: PUBLISHED Published: 2022-06-13T15:06:39 Last Updated: 2024-08-03T07:26:01.160Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Logical defects vulnerability Description: Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2022-31755 State: PUBLISHED Published: 2022-06-13T14:56:09 Last Updated: 2024-08-03T07:26:01.098Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Improper permission preservation vulnerability Description: The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482 - https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE ID: CVE-2022-31756 State: PUBLISHED Published: 2022-06-13T14:55:54 Last Updated: 2024-08-03T07:26:01.205Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Design defects vulnerability Description: The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31757 State: PUBLISHED Published: 2022-06-13T15:05:48 Last Updated: 2024-08-03T07:26:01.279Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Improper use of APIs vulnerability Description: The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31758 State: PUBLISHED Published: 2022-06-13T14:55:25 Last Updated: 2024-08-03T07:26:01.103Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Race condition vulnerability Description: The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31759 State: PUBLISHED Published: 2022-06-13T14:56:25 Last Updated: 2024-08-03T07:26:01.195Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Accessing uninitialized pointers vulnerability Description: AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31760 State: PUBLISHED Published: 2022-06-13T15:03:55 Last Updated: 2024-08-03T07:26:01.204Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Weaknesses Introduced During Design Description: Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31761 State: PUBLISHED Published: 2022-06-13T15:07:29 Last Updated: 2024-08-03T07:26:01.075Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Configuration defectsl vulnerability Description: Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2022-31762 State: PUBLISHED Published: 2022-06-13T14:56:38 Last Updated: 2024-08-03T07:26:01.026Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Input validation vulnerability Description: The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482 - https://consumer.huawei.com/en/support/bulletin/2022/7/
CVE ID: CVE-2022-31763 State: PUBLISHED Published: 2022-06-13T14:55:11 Last Updated: 2024-08-03T07:26:00.981Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds array vulnerability Description: The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2022-31764 State: PUBLISHED Published: 2025-02-06T14:23:03.166Z Last Updated: 2025-02-06T16:25:45.921Z Vendors: Apache Software Foundation Products: Apache ShardingSphere ElasticJob-UI Problem Types: CWE-913 Description: The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of this attack is that the attacker has obtained the account and password. Otherwise, the attacker cannot perform this attack. Additional Analyst Notes: - CISA ADP Vulnrich
account and password. Otherwise, the attacker cannot perform this attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/pg0k223m4hsnnzg4nh7lxvdxxgbkrlqb
CVE ID: CVE-2022-31765 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-04-21T13:48:35.929Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL-Router (Annex A), SCALANCE M812-1 ADSL-Router (Annex B), SCALANCE M816-1 ADSL-Router (Annex A), SCALANCE M816-1 ADSL-Router (Annex B), SCALANCE M826-2 SHDSL-Router, SCALANCE M874-2, SCALANCE M874-3, SCALANCE M876-3 (EVDO), SCALANCE M876-3 (ROK), SCALANCE M876-4, SCALANCE M876-4 (EU), SCALANCE M876-4 (NAM), SCALANCE MUM853-1 (EU), SCALANCE MUM856-1 (EU), SCALANCE MUM856-1 (R
876-4, SCALANCE M876-4 (EU), SCALANCE M876-4 (NAM), SCALANCE MUM853-1 (EU), SCALANCE MUM856-1 (EU), SCALANCE MUM856-1 (RoW), SCALANCE S615, SCALANCE S615 EEC, SCALANCE SC622-2C, SCALANCE SC632-2C, SCALANCE SC636-2C, SCALANCE SC642-2C, SCALANCE SC646-2C, SCALANCE W1748-1 M12, SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, SCALANCE W1788-2IA M12, SCALANCE W721-1 RJ45, SCALANCE W722-1 RJ45, SCALANCE W734-1 RJ45, SCALANCE W734-1 RJ45 (USA), SCALANCE W738-1 M12, SCALANCE W748-1 M12, SCALANCE W748-1 RJ45, SCALANCE W761-1 RJ45, SCALANCE W774-1 M12 EEC, SCALANCE W774-1 RJ45, SCALANCE W774-1 RJ45 (USA), SCALANCE W778-1 M12, SCALANCE W778-1 M12 EEC, SCALANCE W778-1 M12 EEC (USA)
NCE W774-1 RJ45, SCALANCE W774-1 RJ45 (USA), SCALANCE W778-1 M12, SCALANCE W778-1 M12 EEC, SCALANCE W778-1 M12 EEC (USA), SCALANCE W786-1 RJ45, SCALANCE W786-2 RJ45, SCALANCE W786-2 SFP, SCALANCE W786-2IA RJ45, SCALANCE W788-1 M12, SCALANCE W788-1 RJ45, SCALANCE W788-2 M12, SCALANCE W788-2 M12 EEC, SCALANCE W788-2 RJ45, SCALANCE WAM763-1, SCALANCE WAM766-1 (EU), SCALANCE WAM766-1 (US), SCALANCE WAM766-1 EEC (EU), SCALANCE WAM766-1 EEC (US), SCALANCE WUM763-1, SCALANCE WUM766-1 (EU), SCALANCE WUM766-1 (US), SCALANCE XB205-3 (SC, PN), SCALANCE XB205-3 (ST, E/IP), SCALANCE XB205-3 (ST, PN), SCALANCE XB205-3LD (SC, E/IP), SCALANCE XB205-3LD (SC, PN), SCALANCE XB208 (E/IP), SCALANCE XB208 (PN), S
05-3 (ST, PN), SCALANCE XB205-3LD (SC, E/IP), SCALANCE XB205-3LD (SC, PN), SCALANCE XB208 (E/IP), SCALANCE XB208 (PN), SCALANCE XB213-3 (SC, E/IP), SCALANCE XB213-3 (SC, PN), SCALANCE XB213-3 (ST, E/IP), SCALANCE XB213-3 (ST, PN), SCALANCE XB213-3LD (SC, E/IP), SCALANCE XB213-3LD (SC, PN), SCALANCE XB216 (E/IP), SCALANCE XB216 (PN), SCALANCE XC206-2 (SC), SCALANCE XC206-2 (ST/BFOC), SCALANCE XC206-2G PoE, SCALANCE XC206-2G PoE (54 V DC), SCALANCE XC206-2G PoE EEC (54 V DC), SCALANCE XC206-2SFP, SCALANCE XC206-2SFP EEC, SCALANCE XC206-2SFP G, SCALANCE XC206-2SFP G (EIP DEF.), SCALANCE XC206-2SFP G EEC, SCALANCE XC208, SCALANCE XC208EEC, SCALANCE XC208G, SCALANCE XC208G (EIP def.), SCALANCE XC
, SCALANCE XC206-2SFP G EEC, SCALANCE XC208, SCALANCE XC208EEC, SCALANCE XC208G, SCALANCE XC208G (EIP def.), SCALANCE XC208G EEC, SCALANCE XC208G PoE, SCALANCE XC208G PoE (54 V DC), SCALANCE XC216, SCALANCE XC216-3G PoE, SCALANCE XC216-3G PoE (54 V DC), SCALANCE XC216-4C, SCALANCE XC216-4C G, SCALANCE XC216-4C G (EIP Def.), SCALANCE XC216-4C G EEC, SCALANCE XC216EEC, SCALANCE XC224, SCALANCE XC224-4C G, SCALANCE XC224-4C G (EIP Def.), SCALANCE XC224-4C G EEC, SCALANCE XF204, SCALANCE XF204 DNA, SCALANCE XF204-2BA, SCALANCE XF204-2BA DNA, SCALANCE XM408-4C, SCALANCE XM408-4C (L3 int.), SCALANCE XM408-8C, SCALANCE XM408-8C (L3 int.), SCALANCE XM416-4C, SCALANCE XM416-4C (L3 int.), SCALANCE XP2
(L3 int.), SCALANCE XM408-8C, SCALANCE XM408-8C (L3 int.), SCALANCE XM416-4C, SCALANCE XM416-4C (L3 int.), SCALANCE XP208, SCALANCE XP208 (Ethernet/IP), SCALANCE XP208EEC, SCALANCE XP208PoE EEC, SCALANCE XP216, SCALANCE XP216 (Ethernet/IP), SCALANCE XP216EEC, SCALANCE XP216POE EEC, SCALANCE XR324WG (24 x FE, AC 230V), SCALANCE XR324WG (24 X FE, DC 24V), SCALANCE XR326-2C PoE WG, SCALANCE XR326-2C PoE WG (without UL), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V), SCALANCE XR328-4C WG (28xGE, AC 230V), SCALANCE XR328-4C WG (28xGE, DC 24V), SCALANCE XR524-8C, 1x230V, SCALANCE XR524-8C, 1x230V (L3 int.), SCALANCE XR5
30V), SCALANCE XR328-4C WG (28xGE, DC 24V), SCALANCE XR524-8C, 1x230V, SCALANCE XR524-8C, 1x230V (L3 int.), SCALANCE XR524-8C, 24V, SCALANCE XR524-8C, 24V (L3 int.), SCALANCE XR524-8C, 2x230V, SCALANCE XR524-8C, 2x230V (L3 int.), SCALANCE XR526-8C, 1x230V, SCALANCE XR526-8C, 1x230V (L3 int.), SCALANCE XR526-8C, 24V, SCALANCE XR526-8C, 24V (L3 int.), SCALANCE XR526-8C, 2x230V, SCALANCE XR526-8C, 2x230V (L3 int.), SCALANCE XR528-6M, SCALANCE XR528-6M (2HR2, L3 int.), SCALANCE XR528-6M (2HR2), SCALANCE XR528-6M (L3 int.), SCALANCE XR552-12M, SCALANCE XR552-12M (2HR2, L3 int.), SCALANCE XR552-12M (2HR2), SIPLUS NET SCALANCE XC206-2, SIPLUS NET SCALANCE XC206-2SFP, SIPLUS NET SCALANCE XC208, SIPL
SCALANCE XR552-12M (2HR2), SIPLUS NET SCALANCE XC206-2, SIPLUS NET SCALANCE XC206-2SFP, SIPLUS NET SCALANCE XC208, SIPLUS NET SCALANCE XC216-4C Problem Types: CWE-862 Description: Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-552702.pdf