Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-39326 State: PUBLISHED Published: 2024-07-02T20:55:01.296Z Last Updated: 2024-08-02T04:19:20.669Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: NationalSecurityAgency Products: skills-service Problem Types: CWE-352 Description: SkillTree is a micro-learning gamification platform. Prior to version 2.12.6, the endpoint `/admin/projects/{projectname}/skills/{skillname}/video` (and probably others) is open to a cross-site request forgery (CSRF) vulnerability. Due to the endpoint being CSRFable e.g POST request, supports a content type that can be exploited (multipart file upload), makes a state change and has no CSRF mitigations in place (same
tent type that can be exploited (multipart file upload), makes a state change and has no CSRF mitigations in place (samesite flag, CSRF token). It is possible to perform a CSRF attack against a logged in admin account, allowing an attacker that can target a logged in admin of Skills Service to modify the videos, captions, and text of the skill. Version 2.12.6 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/NationalSecurityAgency/skills-service/security/advisories/GHSA-9624-qwxr-jr4j - https://github.com/NationalSecurityAgency/skills-service/commit/68d4235ddcb16e4f33fc7f19d14ff917817a366c - https://g
j - https://github.com/NationalSecurityAgency/skills-service/commit/68d4235ddcb16e4f33fc7f19d14ff917817a366c - https://github.com/NationalSecurityAgency/skills-service/blob/24dd22f43306fc616e4580fb8bb88f66b5d9b41d/service/src/main/java/skills/controller/AdminController.groovy#L574
CVE ID: CVE-2024-39327 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-03-17T21:33:54.114Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://eviden.com/solutions/digital-security/digital-identity/ - https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-
urity-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view
CVE ID: CVE-2024-39328 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-18T19:56:06.240Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config Admin) could exceed their configuration privileges in a multi-partition environment and access some confidential data. Data integrity and availability is not at risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://eviden.com/solutions/digital-security/digital-identity/ - https://support.bull.com/ols/product/security/psirt/security-
/eviden.com/solutions/digital-security/digital-identity/ - https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view
CVE ID: CVE-2024-39329 State: PUBLISHED Published: 2024-07-10T00:00:00.000Z Last Updated: 2025-11-04T16:12:25.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21forum/django-announce - https://www.djangoproject.com/weblog/2024/jul/09/s
curity/ - https://groups.google.com/forum/#%21forum/django-announce - https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE ID: CVE-2024-39330 State: PUBLISHED Published: 2024-07-10T00:00:00.000Z Last Updated: 2025-11-04T16:12:26.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentially allow directory traversal via certain inputs during a save() call. (Built-in Storage sub-classes are unaffected.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ -
ISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/forum/#%21forum/django-announce - https://www.djangoproject.com/weblog/2024/jul/09/security-releases/
CVE ID: CVE-2024-39331 State: PUBLISHED Published: 2024-06-23T00:00:00 Last Updated: 2024-08-22T03:55:10.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ - https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html - https://git.savannah.gnu.org/cgit/emacs/o
t/ - https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html - https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 - https://www.openwall.com/lists/oss-security/2024/06/23/1 - https://www.openwall.com/lists/oss-security/2024/06/23/2 - https://news.ycombinator.com/item?id=40768225 - https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html
CVE ID: CVE-2024-39332 State: PUBLISHED Published: 2024-10-31T00:00:00 Last Updated: 2024-11-01T15:34:47.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2024-0008/
CVE ID: CVE-2024-39334 State: PUBLISHED Published: 2024-06-23T00:00:00 Last Updated: 2024-11-13T17:09:07.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. (The server process is not affected.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mendelson-e-c.com/node/27845
CVE ID: CVE-2024-39335 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-08-27T14:18:59.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mahara.org/interaction/forum/view.php?id=43 - https://mahara.org/interaction/forum/topic.php?id=9519
CVE ID: CVE-2024-39337 State: PUBLISHED Published: 2024-06-23T00:00:00 Last Updated: 2024-11-21T19:32:38.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Click Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.clickstudios.com.au/passwordstate-changelog.aspx - https://www.clickstudios.com.au/security/advisories/
CVE ID: CVE-2024-39338 State: PUBLISHED Published: 2024-08-09T00:00:00 Last Updated: 2024-08-15T19:26:34.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/axios/axios/releases - https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html
CVE ID: CVE-2024-39339 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-11-05T19:28:34.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally identifiable information (PII). The exposure of such information may have serious implications for user privacy and system integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.google.com/document/d/1S-d8zyZr
integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.google.com/document/d/1S-d8zyZreYYGSIr4zGww6F2iBfD63v10Z3YVbGnp2es/edit?usp=sharing - https://mohammedshine.github.io/CVE-2024-39339.html
CVE ID: CVE-2024-39340 State: PUBLISHED Published: 2024-07-12T00:00:00 Last Updated: 2024-09-23T14:52:47.331492 Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has been fixed in UTM 12.6.5 and 12.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.securepoint.de/en/for-companies/utm-firewall - https://wiki.securepoint.de/UTM/Changelog -
r: References: - https://www.securepoint.de/en/for-companies/utm-firewall - https://wiki.securepoint.de/UTM/Changelog - https://wiki.securepoint.de/Advisory/CVE-2024-39340
CVE ID: CVE-2024-39341 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-11-04T16:37:37.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrust Instant Financial Issuance (On Premise) Software (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier leaves behind a configuration file (i.e. WebAPI.cfg.xml) after the installation process. This file can be accessed without authentication on HTTP port 80 by guessing the correct IIS webroot path. It includes system configuration parameter names and values with sensitive configuration values encrypted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.entrust.com/
onfiguration values encrypted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.entrust.com/ - https://trustedcare.entrust.com/login - https://gist.github.com/VAMorales/21a8700a67d80c263b38e693fd528313
CVE ID: CVE-2024-39342 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-09-23T19:46:54.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library (i.e. DCG.Security.dll) with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of the software. Combined with the encrypted password that can be obtained from "WebAPI.cfg.xml" in CVE-2024-39341, the decryption is trivial and can lead to privilege escalation on the Windows host. Additional Analyst Notes: - CISA A
, the decryption is trivial and can lead to privilege escalation on the Windows host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.entrust.com/ - https://trustedcare.entrust.com/login - https://gist.github.com/VAMorales/21a8700a67d80c263b38e693fd528313
CVE ID: CVE-2024-39343 State: PUBLISHED Published: 2024-12-02T00:00:00 Last Updated: 2024-12-03T14:03:54.749Z Severity: HIGH (CVSS 7 CVSS:3.1/AC:H/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software does not properly check the length specified by the MM (Mobility Management) module, which can lead to Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-39344 State: PUBLISHED Published: 2024-08-21T00:00:00 Last Updated: 2024-08-26T16:11:08.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The Apttus_DocuApi__DocusignAuthentication__mdt object is installed via the marketplace from this package and stores some configuration information in a manner that could be compromised. With the default settings when installed for all users, the object can be accessible and (via its fields) could disclose some keys. These disclosed components can be combined to create a valid session via the Docusign API. This will generally lead to a complete compr
components can be combined to create a valid session via the Docusign API. This will generally lead to a complete compromise of the Docusign account because the session is for an administrator service account and may have permission to re-authenticate as specific users with the same authorization flow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://login.salesforce.com/packaging/installPackage.apexp?p0=04t6S000000YUDxQAO - https://deneyed.com/blog/conga/
CVE ID: CVE-2024-39345 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-09-04T14:22:24.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final octet. This allows network-adjacent attackers to derive the support user's SSH password by decrementing the final octet of the connected gateway address or via the BSSID. An attacker can then execute arbitrary OS commands with root-
l octet of the connected gateway address or via the BSSID. An attacker can then execute arbitrary OS commands with root-level privileges. NOTE: The vendor states that there is no intended functionality allowing an attacker to execute arbitrary OS Commands with root-level privileges. The vendor also states that this issue was fixed in SmartOS 12.5.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/blob/main/AdTran/TBA - https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-39345 - https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/
community.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332
CVE ID: CVE-2024-39347 State: PUBLISHED Published: 2024-06-28T06:30:10.727Z Last Updated: 2024-08-02T04:26:14.241Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-276 Description: Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_16
CVE ID: CVE-2024-39348 State: PUBLISHED Published: 2024-06-28T06:30:57.973Z Last Updated: 2024-08-02T04:26:14.241Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-494 Description: Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_16
CVE ID: CVE-2024-39349 State: PUBLISHED Published: 2024-06-28T06:03:59.624Z Last Updated: 2024-08-02T04:26:15.428Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Camera Firmware Problem Types: CWE-120 Description: A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE ID: CVE-2024-39350 State: PUBLISHED Published: 2024-06-28T06:55:25.157Z Last Updated: 2024-08-02T04:26:14.798Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Camera Firmware Problem Types: CWE-290 Description: A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global
tional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE ID: CVE-2024-39351 State: PUBLISHED Published: 2024-06-28T06:07:21.260Z Last Updated: 2024-08-02T04:26:14.288Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Camera Firmware Problem Types: CWE-78 Description: A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichme
ra Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE ID: CVE-2024-39352 State: PUBLISHED Published: 2024-06-28T06:07:52.739Z Last Updated: 2024-08-02T04:26:14.272Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Synology Products: Camera Firmware Problem Types: CWE-863 Description: A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass firmware integrity check via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE ID: CVE-2024-39353 State: PUBLISHED Published: 2024-07-03T08:37:16.395Z Last Updated: 2024-08-02T04:26:15.306Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-39354 State: PUBLISHED Published: 2024-11-11T14:59:38.364Z Last Updated: 2024-11-11T16:07:37.602Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAScreen Problem Types: CWE-121 Description: If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 - https://www.deltaww.com/en-US/Cybersecurity_Advisory
CVE ID: CVE-2024-39355 State: PUBLISHED Published: 2025-02-12T21:19:39.378Z Last Updated: 2025-11-03T20:38:16.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: Denial of Service, CWE-1384 Description: Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html
CVE ID: CVE-2024-39356 State: PUBLISHED Published: 2025-02-12T21:20:02.928Z Last Updated: 2025-02-18T17:28:21.557Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software for Windows Problem Types: Denial of Service, CWE-476 Description: NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html