Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3659 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:06:14.949Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1355560
CVE ID: CVE-2022-3660 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:04:31.649Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1327505
CVE ID: CVE-2022-3661 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T01:14:03.268Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1350111
CVE ID: CVE-2022-3662 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:58:06.149Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA A
VDB-212002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/802 - https://github.com/axiomatic-systems/Bento4/files/9817606/mp42hls_cuaf_Ap4Sample99.zip - https://vuldb.com/?id.212002
CVE ID: CVE-2022-3663 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:58.287Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212003. Additional Analyst Notes: - CVE Program Co
d may be used. The associated identifier of this vulnerability is VDB-212003. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/800 - https://github.com/axiomatic-systems/Bento4/files/9817303/mp4fragment_npd_Ap4StsdAtom.cpp75.zip - https://vuldb.com/?id.212003
CVE ID: CVE-2022-3664 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:49.857Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212004. Additional Analyst Notes: - CVE Program Containe
ic and may be used. The identifier of this vulnerability is VDB-212004. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/794 - https://github.com/axiomatic-systems/Bento4/files/9746288/avcinfo_poc1.zip - https://vuldb.com/?id.212004
CVE ID: CVE-2022-3665 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:40.046Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212005 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container
be used. The identifier VDB-212005 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/794 - https://github.com/axiomatic-systems/Bento4/files/9746311/avcinfo_poc2.zip - https://vuldb.com/?id.212005
CVE ID: CVE-2022-3666 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:32.854Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. VDB-212006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/793 - https://github.com/axiomatic-systems/Bento4/files/9744391/mp42ts_poc.zip - https://vuldb.com/?id.212006
CVE ID: CVE-2022-3667 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:19.768Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryByteStream::WritePartial of the file Ap4ByteStream.cpp of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212007. Additional Analys
isclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212007. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/789 - https://github.com/17ssDP/fuzzer_crashes/blob/main/Bento4/mp42aac-hbo-01 - https://vuldb.com/?id.212007
CVE ID: CVE-2022-3668 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:57:09.941Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ed. The identifier of this vulnerability is VDB-212008. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/776 - https://github.com/axiomatic-systems/Bento4/files/9640968/Bug_1_POC.zip - https://vuldb.com/?id.212008
CVE ID: CVE-2022-3669 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:56:59.510Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-404 Description: A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212009 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/776 - https://github.com/axiomatic-systems/Bento4/files/9675042/Bug_2_POC.zip - https://vuldb.com/?id.212009
CVE ID: CVE-2022-3670 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:56:50.367Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-119 Description: A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212010 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/776 - https://github.com/axiomatic-systems/Bento4/files/9675049/Bug_3_POC.zip - https://vuldb.com/?id.212010
CVE ID: CVE-2022-3671 State: PUBLISHED Published: 2022-10-26T00:00:00 Last Updated: 2024-08-03T01:14:03.241Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: eLearning System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212014 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
212014 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.212014 - https://vuldb.com/?ctiid.212014 - https://vuldb.com/?submit.49576 - https://github.com/anx0ing/CVE_demo/blob/main/2022/eLearning%20System-SQL%20injections.md
CVE ID: CVE-2022-3672 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-15T13:24:33.171Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-212015. Additional Analyst N
he attack may be initiated remotely. The associated identifier of this vulnerability is VDB-212015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.212015
CVE ID: CVE-2022-3673 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-15T13:24:27.022Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the file /php-sms/classes/Master.php. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-212016. Additional Analyst Notes: - CVE Program Container: - C
ack remotely. The identifier of this vulnerability is VDB-212016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.212016
CVE ID: CVE-2022-3674 State: PUBLISHED Published: 2022-10-26T00:00:00.000Z Last Updated: 2025-04-14T15:56:37.710Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Sanitization Management System Problem Types: CWE-287 Description: A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The identifier VDB-212017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
ned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.212017
CVE ID: CVE-2022-3675 State: PUBLISHED Published: 2022-11-03T17:25:02.823Z Last Updated: 2025-05-02T18:53:10.153Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Fedora Project Products: CoreOS Problem Types: CWE-20 Description: Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requires a password to access the GRUB command-line, modify kernel command-line arguments, or boot non-default OSTree deployments. Recent Fedora CoreOS releases have a misconfiguration which allows booting non-default OSTree deployments without entering a password. This allows someone with access to the GRUB menu to boot i
g non-default OSTree deployments without entering a password. This allows someone with access to the GRUB menu to boot into an older version of Fedora CoreOS, reverting any security fixes that have recently been applied to the machine. A password is still required to modify kernel command-line arguments and to access the GRUB command line. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coreos/fedora-coreos-tracker/issues/1333 - https://lists.fedoraproject.org/archives/list/coreos-status@lists.fedoraproject.org/thread/NHUCNH5Y4UH5DPUCXISYXXVA563TLFEJ/ - https://docs.fedoraproject.org/en-US/fedora-coreos/grub-password/
CVE ID: CVE-2022-3676 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:59:25.715Z Vendors: The Eclipse Foundation Products: Eclipse OpenJ9 Problem Types: CWE-20, CWE-843 Description: In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-openj9/openj9/pull/16122 - https://github.com/eclipse/omr/pull/6773 - https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/389
CVE ID: CVE-2022-3677 State: PUBLISHED Published: 2022-12-05T16:50:30.656Z Last Updated: 2025-04-24T13:33:51.862Z Vendors: Unknown Products: Advanced Import : One Click Import for WordPress or Theme Demo Data Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to make a logged in admin install arbitrary plugins from WordPress.org, and activate arbitrary ones from the blog via CSRF attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5a7c6367-a3e6-4411-8865-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5a7c6367-a3e6-4411-8865-2a9dbc9f1450
CVE ID: CVE-2022-3678 State: REJECTED Published: N/A Last Updated: 2023-03-14T11:11:10.103Z Description: No description available.
CVE ID: CVE-2022-3679 State: PUBLISHED Published: 2023-01-09T22:13:44.163Z Last Updated: 2025-04-09T18:37:34.154Z Vendors: Unknown Products: Starter Templates by Kadence WP Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ec4b9bf7-71d6-4528-9dd1-cc7779624760
CVE ID: CVE-2022-3680 State: REJECTED Published: N/A Last Updated: 2023-03-14T12:22:26.983Z Description: No description available.
CVE ID: CVE-2022-3681 State: PUBLISHED Published: 2023-10-27T19:21:23.053Z Last Updated: 2024-09-09T15:02:16.329Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Motorola Products: MR2600 Router Problem Types: CWE-287 Description: A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20230317174952/https://help.motorolanetwork.com/hc/en-us/article
Vulnrichment: References: - https://web.archive.org/web/20230317174952/https://help.motorolanetwork.com/hc/en-us/articles/9933302506523
CVE ID: CVE-2022-3682 State: PUBLISHED Published: 2023-03-28T11:36:37.421Z Last Updated: 2025-02-18T19:34:11.076Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Hitachi Energy Products: SDM600 Problem Types: CWE-434 Description: A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291) List of CPEs: * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachiener
3 HF4 (Build Nr. 1.2.23000.291) List of CPEs: * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:* * cpe:2.3:a:hitac
ienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:
*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:* Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000138&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-3683 State: PUBLISHED Published: 2023-03-28T12:28:37.543Z Last Updated: 2025-02-18T20:28:27.275Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Hitachi Energy Products: SDM600 Problem Types: CWE-285 Description: A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having access to sensitive data. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291) List of CPEs: * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:
s prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291) List of CPEs: * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:
:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:* * cpe:2.3:a:hitachiene