Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2131c3fdb2143e148e8ba88555f7f7a63b25e - https://security.gentoo.org/glsa/201811-12 - https://bugs.ghostscript.com/show_bug.cgi?id=699661 - https://usn.ubuntu.com/3768-1/ - https://www.artifex.com/news/ghostscript-security-resolved/ - https://www.debian.org/security/2018/dsa-4288 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-16541 State: PUBLISHED Published: 2018-09-05T18:00:00 Last Updated: 2024-08-05T10:24:32.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=241d91112771a6104de10b3948c3f350d6690c1d - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://access.redhat.com/errata/RHSA-2018:3834 - https://www.artifex.com/news/ghostscript-security-resolved/ - https:
- https://access.redhat.com/errata/RHSA-2018:3834 - https://www.artifex.com/news/ghostscript-security-resolved/ - https://www.debian.org/security/2018/dsa-4288 - https://bugs.ghostscript.com/show_bug.cgi?id=699664 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
CVE ID: CVE-2018-16542 State: PUBLISHED Published: 2018-09-05T18:00:00 Last Updated: 2024-08-05T10:24:33.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2918 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - http://www.securityfocus.com/bid/105337 - https://bugs.ghostscript.com/show_bug.cgi?id=699668 - https://www.debian.org/security/2018/dsa-4288 - https
bid/105337 - https://bugs.ghostscript.com/show_bug.cgi?id=699668 - https://www.debian.org/security/2018/dsa-4288 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b575e1ec42cc86f6a58c603f2a88fcc2af699cc8 - http://seclists.org/oss-sec/2018/q3/182
CVE ID: CVE-2018-16543 State: PUBLISHED Published: 2018-09-05T18:00:00 Last Updated: 2024-08-05T10:24:32.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5b5536fa88a9e885032bc0df3852c3439399a5c0 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://www.debian.org/security/2018/dsa-4288 - https://bugs.ghostscript.com/show_bug.cgi?id=699670 - https://lists.debian.org/debian-lts-announce/2018/09/msg00038.html
CVE ID: CVE-2018-16545 State: PUBLISHED Published: 2018-09-05T19:00:00Z Last Updated: 2024-09-17T00:56:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library (dll) assumed the identity of a temporary (tmp) file (isxdl.dll) and an executable file assumed the identity of a temporary file (996E.temp). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GitHubAssessments/CVE_Assessment_03_2018/blob/master/Kaizen_Report.pdf
CVE ID: CVE-2018-16546 State: PUBLISHED Published: 2018-09-05T20:00:00Z Last Updated: 2024-09-16T20:58:14.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Sep/6
CVE ID: CVE-2018-16548 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T10:24:32.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdraheim/zziplib/issues/58 - https://access.redhat.com/errata/RHSA-2019:2196 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00065.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00066.html - https://lists.debian.org/deb
sg00065.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00066.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-16549 State: PUBLISHED Published: 2018-09-05T21:00:00Z Last Updated: 2024-09-16T23:30:38.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149204
CVE ID: CVE-2018-16550 State: PUBLISHED Published: 2018-09-05T22:00:00 Last Updated: 2024-08-05T10:24:32.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/vah_13/status/1036894081350291457
CVE ID: CVE-2018-16551 State: PUBLISHED Published: 2018-09-05T22:00:00 Last Updated: 2024-08-05T10:24:32.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LavaLite/cms/issues/259
CVE ID: CVE-2018-16552 State: PUBLISHED Published: 2018-09-05T22:00:00 Last Updated: 2024-08-05T10:24:32.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MicroPyramid/Django-CRM/issues/68
CVE ID: CVE-2018-16553 State: PUBLISHED Published: 2019-06-20T13:11:15 Last Updated: 2024-08-05T10:24:32.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/jspxcms/Jspxcms/releases - http://www.jspxcms.com/jspbb/question/770
CVE ID: CVE-2018-16554 State: PUBLISHED Published: 2018-09-16T02:00:00 Last Updated: 2024-08-05T10:24:32.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling. Additional Analyst Notes: - CVE Program Container: References: - https://nimo-zhang.github.io/2018/09/07/bug-analysis-1/#more - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908176 - https://lists.debian.org/debian-lts-announce/2019/12/ms
ore - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908176 - https://lists.debian.org/debian-lts-announce/2019/12/msg00037.html
CVE ID: CVE-2018-16555 State: PUBLISHED Published: 2018-12-13T16:00:00 Last Updated: 2024-08-05T10:24:32.846Z Vendors: Siemens AG Products: SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M Problem Types: CWE-80 Description: A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1), SCALANCE S623 (All versions < V4.0.1.1), SCALANCE S627-2M (All versions < V4.0.1.1). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order f
k. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-242982.pdf - http://www.securityfocus.com/bid/105937
CVE ID: CVE-2018-16556 State: PUBLISHED Published: 2018-12-13T16:00:00 Last Updated: 2024-08-05T10:24:32.865Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC S7-400 CPU 412-1 DP V7, SIMATIC S7-400 CPU 412-2 DP V7, SIMATIC S7-400 CPU 414-2 DP V7, SIMATIC S7-400 CPU 414-3 DP V7, SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-2 DP V7, SIMATIC S7-400 CPU 416-3 DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-2 DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, SIMATIC S7-400 CPU 417-4 DP V7, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V4.5 and below CPU family (inc
N/DP V7, SIMATIC S7-400 CPU 417-4 DP V7, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-410 CPU family (incl. SIPLUS variants), SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 V7, SIPLUS S7-400 CPU 417-4 V7 Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions
412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-
(All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Specially crafted packets sent to port 102/tcp via Ethernet interface, via PROFIBUS, or via Multi Point Interfaces (MPI) could cause the affected dev
t to port 102/tcp via Ethernet interface, via PROFIBUS, or via Multi Point Interfaces (MPI) could cause the affected devices to go into defect mode. Manual reboot is required to resume normal operation. Successful exploitation requires an attacker to be able to send specially crafted packets to port 102/tcp via Ethernet interface, via PROFIBUS or Multi Point Interfaces (MPI). No user interaction and no user privileges are required to exploit the security vulnerability. The vulnerability could allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://ce
compromising the availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-113131.pdf
CVE ID: CVE-2018-16557 State: PUBLISHED Published: 2018-12-13T16:00:00 Last Updated: 2024-08-05T10:24:32.852Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC S7-400 CPU 412-1 DP V7, SIMATIC S7-400 CPU 412-2 DP V7, SIMATIC S7-400 CPU 414-2 DP V7, SIMATIC S7-400 CPU 414-3 DP V7, SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-2 DP V7, SIMATIC S7-400 CPU 416-3 DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-2 DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, SIMATIC S7-400 CPU 417-4 DP V7, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V4.5 and below CPU family (inc
N/DP V7, SIMATIC S7-400 CPU 417-4 DP V7, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-410 CPU family (incl. SIPLUS variants), SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 V7, SIPLUS S7-400 CPU 417-4 V7 Problem Types: CWE-347 Description: A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All version
U 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7
7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Sending of specially crafted packets to port 102/tcp via Ethernet interface via PROFIBUS or Multi Point Interfaces (MPI) could cause a denial of ser
packets to port 102/tcp via Ethernet interface via PROFIBUS or Multi Point Interfaces (MPI) could cause a denial of service condition on affected devices. Flashing with a firmware image may be required to recover the CPU. Successful exploitation requires an attacker to have network access to port 102/tcp via Ethernet interface or to be able to send messages via PROFIBUS or Multi Point Interfaces (MPI) to the device. No user interaction is required. If no access protection is configured, no privileges are required to exploit the security vulnerability. The vulnerability could allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of th
ld allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-113131.pdf
CVE ID: CVE-2018-16558 State: PUBLISHED Published: 2019-04-17T13:38:34 Last Updated: 2024-08-05T10:24:33.001Z Vendors: Siemens Products: SIMATIC S7-1500 CPU Problem Types: Improper Input Validation Description: A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileg
th network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-180635.pdf
CVE ID: CVE-2018-16559 State: PUBLISHED Published: 2019-04-17T13:38:34 Last Updated: 2024-08-05T10:24:32.921Z Vendors: Siemens Products: SIMATIC S7-1500 CPU Problem Types: Improper Input Validation Description: A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileg
CVE ID: CVE-2018-16560 State: REJECTED Published: 2019-04-17T13:34:20 Last Updated: 2019-04-17T13:34:20 Description: No description available.
CVE ID: CVE-2018-16561 State: PUBLISHED Published: 2019-04-17T13:38:34 Last Updated: 2024-08-05T10:24:32.860Z Vendors: Siemens Products: SIMATIC S7-300 CPUs Problem Types: Improper Input Validation Description: A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an attacker to be able to send a specially crafted S7 communication packet to a communication interface of the CPU. This includes Ethernet, PROFIBUS, and Multi Point Interfaces (MPI). No user
ket to a communication interface of the CPU. This includes Ethernet, PROFIBUS, and Multi Point Interfaces (MPI). No user interaction or privileges are required to exploit the security vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the core functionality of the CPU, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-306710.pdf
CVE ID: CVE-2018-16562 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16563 State: PUBLISHED Published: 2019-03-21T14:57:36 Last Updated: 2024-08-05T10:24:32.996Z Vendors: Siemens Products: Firmware variant IEC 61850 for EN100 Ethernet module, Firmware variant MODBUS TCP for EN100 Ethernet module, Firmware variant DNP3 TCP for EN100 Ethernet module, Firmware variant IEC104 for EN100 Ethernet module, Firmware variant Profinet IO for EN100 Ethernet module, SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules, SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules Problem Types: Other Description: A vulnerability has been identified in Firmware variant IEC 61850
ommunication modules Problem Types: Other Description: A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially cr
5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of th
ges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf
CVE ID: CVE-2018-16564 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16565 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16566 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16567 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16568 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16569 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16570 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16571 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16572 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16573 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-16574 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.