Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8852 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-16T23:22:08.056Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-384 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions without invalidating any existing session identifier. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/adv
are/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8853 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-16T17:58:36.306Z Vendors: Philips Products: Brilliance CT Scanners Problem Types: CWE-250 Description: Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots by default with elevated Windows privileges, enabling a kiosk application, user, or an attacker to potentially attain unauthorized elevated privileges in Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior. Also, attackers may gain access to unauthoriz
T SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior. Also, attackers may gain access to unauthorized resources from the underlying Windows operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/104088 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01
CVE ID: CVE-2018-8854 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-16T23:46:57.353Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-400 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8855 State: PUBLISHED Published: 2018-07-24T17:00:00Z Last Updated: 2024-09-17T01:10:42.995Z Vendors: Echelon Products: SmartServer 1, SmartServer 2, i.LON 100, i.LON 600 Problem Types: CWE-319 Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE ID: CVE-2018-8856 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-17T01:56:15.854Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: USE OF HARD-CODED CREDENTIALS CWE- 798 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8857 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-16T21:02:22.963Z Vendors: Philips Products: Brilliance CT Scanners Problem Types: CWE-798 Description: Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system. Additional Analyst Notes: - C
ternal data. An attacker could compromise these credentials and gain access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/104088 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01
CVE ID: CVE-2018-8858 State: PUBLISHED Published: 2018-10-30T21:00:00 Last Updated: 2024-08-05T07:10:46.255Z Vendors: n/a Products: VGo Robot Problem Types: CWE-522 Description: If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE ID: CVE-2018-8859 State: PUBLISHED Published: 2018-07-24T17:00:00Z Last Updated: 2024-09-17T03:48:36.377Z Vendors: Echelon Products: SmartServer 1, SmartServer 2, i.LON 100, i.LON 600 Problem Types: CWE-288 Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when specifying the directory to be accessed. This vulnerability does not affect the i.LON 600 product. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.
oes not affect the i.LON 600 product. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE ID: CVE-2018-8860 State: PUBLISHED Published: 2018-05-09T21:00:00Z Last Updated: 2024-09-17T01:30:43.321Z Vendors: ICS-CERT Products: VGo Robot Problem Types: Cleartext Transmission of Sensitive Information Description: In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 - http://www.securityfocus.com/bid/103966
CVE ID: CVE-2018-8861 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-17T03:59:05.842Z Vendors: Philips Products: Brilliance CT Scanners Problem Types: CWE-668 Description: Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system. Additional Analyst N
ileges from the underlying Windows OS, and access unauthorized resources from the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/104088 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01
CVE ID: CVE-2018-8862 State: PUBLISHED Published: 2018-05-25T16:00:00Z Last Updated: 2024-09-16T18:14:37.679Z Vendors: Acoustic Technology, Inc. (ATI Systems) Products: Emergency Mass Notification Systems Problem Types: CWE-287 Description: In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103721 - https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01
CVE ID: CVE-2018-8863 State: PUBLISHED Published: 2023-11-09T22:46:29.821Z Last Updated: 2024-09-03T17:56:37.290Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Philips Products: EncoreAnywhere Problem Types: CWE-200 Description: The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsma-18-137-02
CVE ID: CVE-2018-8864 State: PUBLISHED Published: 2018-05-25T16:00:00Z Last Updated: 2024-09-16T21:57:32.443Z Vendors: Acoustic Technology, Inc. (ATI Systems) Products: ATI Emergency Mass Notification Systems Problem Types: CWE-311 Description: In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103721 - https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01
CVE ID: CVE-2018-8865 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-17T01:36:36.452Z Vendors: Lantech Products: IDS 2102 Problem Types: CWE-121 Description: In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-123-01 - http://www.securityfocus.com/bid/104098
CVE ID: CVE-2018-8866 State: PUBLISHED Published: 2018-05-09T19:00:00Z Last Updated: 2024-09-16T16:33:35.624Z Vendors: ICS-CERT Products: VGo Robot Problem Types: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01 - http://www.securityfocus.com/bid/103966
CVE ID: CVE-2018-8867 State: PUBLISHED Published: 2018-05-18T20:00:00Z Last Updated: 2024-09-16T18:43:49.739Z Vendors: ICS-CERT Products: GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RXi all versions Problem Types: CWE-20 Description: In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacker to send specially craft
i all versions, the device does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104241 - https://ics-cert.us-cert.gov/advisories/ICSA-18-137-01
CVE ID: CVE-2018-8868 State: PUBLISHED Published: 2018-07-02T18:00:00Z Last Updated: 2025-05-22T18:14:07.710Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Medtronic Products: 24950 MyCareLink Monitor, 24952 MyCareLink Monitor Problem Types: CWE-749 Description: Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physical access to the device can exploit other vulnerabilities to access this debug functionality. This debug functionality provides the ability to
can exploit other vulnerabilities to access this debug functionality. This debug functionality provides the ability to read and write arbitrary memory values to implantable cardiac devices via inductive or short range wireless protocols. An attacker with close physical proximity to a target implantable cardiac device can use this debug functionality. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-6-28-18.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-179-01
CVE ID: CVE-2018-8869 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-16T19:30:33.602Z Vendors: Lantech Products: IDS 2102 Problem Types: CWE-20 Description: In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-123-01 - http://www.securityfocus.com/bid/104098
CVE ID: CVE-2018-8870 State: PUBLISHED Published: 2018-07-02T18:00:00Z Last Updated: 2025-05-22T18:10:03.426Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Medtronic Products: 24950 MyCareLink Monitor, 24952 MyCareLink Monitor Problem Types: CWE-259 Description: Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/secu
dditional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-6-28-18.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-179-01
CVE ID: CVE-2018-8871 State: PUBLISHED Published: 2018-05-25T16:00:00Z Last Updated: 2024-09-17T04:13:41.717Z Vendors: Delta Electronics Products: Automation TPEditor Problem Types: CWE-122 Description: In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104216 - https://ics-cert.us-cert.gov/advisories/ICSA-18-137-04
CVE ID: CVE-2018-8872 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-16T16:32:36.977Z Vendors: Schneider Electric Products: Triconex Tricon Problem Types: CWE-119 Description: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02 - http://www.securityfocus.com
nload/document/SEVD-2017-347-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02 - http://www.securityfocus.com/bid/103947
CVE ID: CVE-2018-8873 State: PUBLISHED Published: 2018-03-20T22:00:00Z Last Updated: 2024-09-16T18:40:07.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/2345%20security%20guard/0x00222040
CVE ID: CVE-2018-8874 State: PUBLISHED Published: 2018-03-20T22:00:00Z Last Updated: 2024-09-16T20:47:45.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222054. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/2345%20security%20guard/0x00222054
CVE ID: CVE-2018-8875 State: PUBLISHED Published: 2018-03-20T22:00:00Z Last Updated: 2024-09-16T18:08:20.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x0022209c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/2345%20security%20guard/0x0022209c
CVE ID: CVE-2018-8876 State: PUBLISHED Published: 2018-03-20T22:00:00Z Last Updated: 2024-09-16T22:24:39.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222098. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/2345%20security%20guard/0x00222098
CVE ID: CVE-2018-8877 State: PUBLISHED Published: 2020-02-27T21:11:29 Last Updated: 2024-08-05T07:10:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md
CVE ID: CVE-2018-8878 State: PUBLISHED Published: 2020-02-27T21:12:40 Last Updated: 2024-08-05T07:10:46.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md
CVE ID: CVE-2018-8879 State: PUBLISHED Published: 2019-11-21T15:26:03 Last Updated: 2024-08-05T07:10:46.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request. Vulnerable parameters are flag, mac, and cat_id. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/Networking/RTAC66U/HelpDesk_BIOS - https://pagedout.institute/download/PagedOut_001_beta1.pdf
CVE ID: CVE-2018-8880 State: PUBLISHED Published: 2018-04-23T18:00:00 Last Updated: 2024-08-05T07:10:46.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://sadfud.me/explotos/deviceip.txt - https://www.exploit-db.com/exploits/44488/
CVE ID: CVE-2018-8881 State: PUBLISHED Published: 2018-03-20T23:00:00 Last Updated: 2024-08-05T07:10:46.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392446 - https://usn.ubuntu.com/3694-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-8882 State: PUBLISHED Published: 2018-03-20T23:00:00 Last Updated: 2024-08-05T07:10:46.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392445 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-8883 State: PUBLISHED Published: 2018-03-20T23:00:00 Last Updated: 2024-08-05T07:10:46.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392447 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-8885 State: PUBLISHED Published: 2018-03-28T20:00:00 Last Updated: 2024-08-05T07:10:46.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService._check_permission call. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3607-1/
CVE ID: CVE-2018-8888 State: PUBLISHED Published: 2018-12-20T20:00:00 Last Updated: 2024-08-05T07:10:46.639Z Vendors: BlackBerry Products: BlackBerry UEM Problem Types: Stored Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000054162
CVE ID: CVE-2018-8889 State: PUBLISHED Published: 2018-09-19T21:00:00Z Last Updated: 2024-09-17T00:21:29.633Z Vendors: BlackBerry Products: BlackBerry Enterprise Mobility Server (BEMS) Problem Types: Directory traversal Description: A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000051590&language=en_US