Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ary code execution under the victim's privileges. This risk is significant in shared environments, potentially leading to full system compromise. Even with non-static directory names, attackers can monitor parent directories for file creation events. The brief window between script creation (with insecure permissions) and execution allows rapid overwrites. Directory names can also be inferred via timestamps or logs, and automation enables exploitation even with semi-randomized paths by acting within milliseconds of detection. This issue has been patched in version 25.3.1. A workaround involves restricting conda_build.sh permissions from 0o766 to 0o700 (owner-only read/write/execute). Additio
workaround involves restricting conda_build.sh permissions from 0o766 to 0o700 (owner-only read/write/execute). Additionally, use atomic file creation (write to a temporary randomized filename and rename atomically) to minimize the race condition window. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda/conda-build/security/advisories/GHSA-vfp6-3v8g-vcmm - https://github.com/conda/conda-build/pull/5 - https://github.com/conda/conda-build/commit/d246e49c8f45e8033915156ee3d77769926f3c2e - https://github.com/conda/conda-build/blob/3f06913bba22c4e1ef1065df9e00d86ac97f087c/conda_build/build.py#L3054-L3084
CVE ID: CVE-2025-32798 State: PUBLISHED Published: 2025-06-16T20:10:06.902Z Last Updated: 2025-06-17T18:11:27.848Z Vendors: conda Products: conda-build Problem Types: CWE-94 Description: Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerable to arbitrary code execution due to unsafe evaluation of recipe selectors. Currently, conda-build uses the eval function to process embedded selectors in meta.yaml files. This approach evaluates user-defined expressions without proper sanitization, which allows arbitrary code to be executed during the build process. As a result, the integrity of the
er sanitization, which allows arbitrary code to be executed during the build process. As a result, the integrity of the build environment is compromised, and unauthorized commands or file operations may be performed. The vulnerability stems from the inherent risk of using eval() on untrusted input in a context intended to control dynamic build configurations. By directly interpreting selector expressions, conda-build creates a potential execution pathway for malicious code, violating security assumptions. This issue has been patched in version 25.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda/conda-build/security/advisories/GHSA-6cc8-c3c9-3rgr
es: - CISA ADP Vulnrichment: References: - https://github.com/conda/conda-build/security/advisories/GHSA-6cc8-c3c9-3rgr - https://github.com/conda/conda-build/commit/3d87213b840774a24ab1733664d2b36664233754 - https://github.com/conda/conda-build/blob/834448b995eee02cf1c2e7ca97bcfa9affc77ee5/conda_build/metadata.py
CVE ID: CVE-2025-32799 State: PUBLISHED Published: 2025-06-16T20:23:02.645Z Last Updated: 2025-06-17T18:10:29.876Z Vendors: conda Products: conda-build Problem Types: CWE-22 Description: Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tarslip) attacks due to improper sanitization of tar entry paths. Attackers can craft tar archives containing entries with directory traversal sequences to write files outside the intended extraction directory. This could lead to arbitrary file overwrites, privilege escalation, or code execution if sensitive locations are targeted. This issue has been pat
ry file overwrites, privilege escalation, or code execution if sensitive locations are targeted. This issue has been patched in version 25.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda/conda-build/security/advisories/GHSA-h499-pxgj-qh5h - https://github.com/conda/conda-build/commit/bdf5e0022cec9a0c1378cca3f2dc8c92b4834673 - https://github.com/conda/conda-build/blob/834448b995eee02cf1c2e7ca97bcfa9affc77ee5/conda_build/convert.py - https://github.com/conda/conda-build/blob/834448b995eee02cf1c2e7ca97bcfa9affc77ee5/conda_build/render.py
CVE ID: CVE-2025-32800 State: PUBLISHED Published: 2025-06-16T20:38:53.100Z Last Updated: 2025-06-17T19:03:49.217Z Vendors: conda Products: conda-build Problem Types: CWE-1357 Description: Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This package is not published in PyPI. An attacker could claim this namespace and upload arbitrary (malicious) code to the package, and then exploit pip install commands by injecting the malicious dependency in the solve. This issue has been fixed in version 25.3.0. A workaround involves using --no-deps for pip install-ing the project from the repository. Ad
n fixed in version 25.3.0. A workaround involves using --no-deps for pip install-ing the project from the repository. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda/conda-build/security/advisories/GHSA-83gh-p93g-cwgx - https://github.com/conda/conda-build/commit/f5a6aeef0d5d6940b8c2a88796910dc7476a62bb - https://drive.google.com/file/d/18qe97zxcpTn2l84187A9meGCi2Wg-n_Y/view
CVE ID: CVE-2025-32801 State: PUBLISHED Published: 2025-05-28T17:03:34.499Z Last Updated: 2025-05-28T17:33:50.355Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ISC Products: Kea Problem Types: CWE-94 Description: Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2025-32801
CVE ID: CVE-2025-32802 State: PUBLISHED Published: 2025-05-28T17:08:11.180Z Last Updated: 2025-05-28T17:23:22.213Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: ISC Products: Kea Problem Types: CWE-73, CWE-379 Description: Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kb.isc
through 2.6.2, and 2.7.0 through 2.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2025-32802
CVE ID: CVE-2025-32803 State: PUBLISHED Published: 2025-05-28T17:08:20.769Z Last Updated: 2025-05-28T17:28:58.513Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ISC Products: Kea Problem Types: CWE-276 Description: In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2025-32803
CVE ID: CVE-2025-32807 State: PUBLISHED Published: 2025-04-10T00:00:00.000Z Last Updated: 2025-04-11T16:04:04.886Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: FusionDirectory Products: FusionDirectory Problem Types: CWE-24 Description: A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.fusiondirectory.org/fusiondirectory/fd/-/blob/e9304844fb5c8ce4a9af9e26858af5e22e15b9bd/include/class_IconTh
tps://gitlab.fusiondirectory.org/fusiondirectory/fd/-/blob/e9304844fb5c8ce4a9af9e26858af5e22e15b9bd/include/class_IconTheme.inc#L233-237 - https://gitlab.fusiondirectory.org/fusiondirectory/fd/-/commit/9edefd0b367450d665a141c5e94db8a06d208556 - https://gitlab.fusiondirectory.org/fusiondirectory/fd/-/blob/e9304844fb5c8ce4a9af9e26858af5e22e15b9bd/Changelog.md?plain=1#L112
CVE ID: CVE-2025-32808 State: PUBLISHED Published: 2025-04-11T00:00:00.000Z Last Updated: 2025-04-11T16:03:30.292Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: W. W. Norton Products: InQuizitive Problem Types: CWE-602 Description: W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@JIT_Shellcode/inquizitive-client-side-injection-lms-trust-bypass-and-stored-xss-0ea4da8d22fa
CVE ID: CVE-2025-32809 State: PUBLISHED Published: 2025-04-11T00:00:00.000Z Last Updated: 2025-04-11T16:03:21.550Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: W. W. Norton Products: InQuizitive Problem Types: CWE-79 Description: W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@JIT_Shellcode/inquizitive-client-side-injection-lms-trust-bypass-and-stored-xss-0ea4da8d22fa
CVE ID: CVE-2025-32813 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-23T18:22:10.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32813
CVE ID: CVE-2025-32814 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-22T18:29:57.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32814
CVE ID: CVE-2025-32815 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-22T15:13:29.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32815
CVE ID: CVE-2025-32816 State: PUBLISHED Published: 2025-04-11T00:00:00.000Z Last Updated: 2025-04-11T16:03:10.125Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodeLit Products: CourseLit Problem Types: CWE-472 Description: CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/codelitdev/courselit/pull/574/commits/5e11094df938e08485d0ab8aec2722c237ba0496 - https://github.com/codelitdev/courselit/releases/tag/v0.57.5
CVE ID: CVE-2025-32817 State: PUBLISHED Published: 2025-04-16T19:10:57.562Z Last Updated: 2025-04-17T15:55:27.433Z Vendors: SonicWall Products: Connect Tunnel Problem Types: CWE-59 Description: A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0007
CVE ID: CVE-2025-32818 State: PUBLISHED Published: 2025-04-23T19:24:53.043Z Last Updated: 2025-04-23T19:56:30.725Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-476 Description: A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0009
CVE ID: CVE-2025-32819 State: PUBLISHED Published: 2025-05-07T17:18:23.274Z Last Updated: 2025-07-19T03:55:10.808Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-552 Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
CVE ID: CVE-2025-32820 State: PUBLISHED Published: 2025-05-07T17:20:10.699Z Last Updated: 2025-05-07T18:53:33.086Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-22 Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
CVE ID: CVE-2025-32821 State: PUBLISHED Published: 2025-05-07T17:22:14.812Z Last Updated: 2025-05-08T03:56:16.612Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-78 Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
CVE ID: CVE-2025-32822 State: PUBLISHED Published: 2025-04-16T17:37:46.225Z Last Updated: 2025-04-17T14:20:38.846Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'DeleteProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requir
o the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32823 State: PUBLISHED Published: 2025-04-16T17:37:47.704Z Last Updated: 2025-04-17T14:20:29.103Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires
the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32824 State: PUBLISHED Published: 2025-04-16T17:37:49.168Z Last Updated: 2025-04-17T14:20:20.759Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requir
CVE ID: CVE-2025-32825 State: PUBLISHED Published: 2025-04-16T17:37:50.627Z Last Updated: 2025-04-16T18:51:30.717Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetProjects' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires
CVE ID: CVE-2025-32826 State: PUBLISHED Published: 2025-04-16T17:37:52.113Z Last Updated: 2025-04-16T18:48:46.448Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetActiveProjects' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack re
te to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32827 State: PUBLISHED Published: 2025-04-16T17:37:53.691Z Last Updated: 2025-04-16T18:46:42.199Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ActivateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requ
to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32828 State: PUBLISHED Published: 2025-04-16T17:37:55.116Z Last Updated: 2025-04-17T14:20:13.879Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectCrossCommunications' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A succe
ad from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32829 State: PUBLISHED Published: 2025-04-16T17:37:56.625Z Last Updated: 2025-04-17T14:20:07.329Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProjectCrossCommunications' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A success
from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE ID: CVE-2025-32830 State: PUBLISHED Published: 2025-04-16T17:37:58.050Z Last Updated: 2025-04-17T14:19:58.370Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requir
CVE ID: CVE-2025-32831 State: PUBLISHED Published: 2025-04-16T17:37:59.574Z Last Updated: 2025-04-17T14:19:48.946Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: TeleControl Server Basic Problem Types: CWE-89 Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful att
nd write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-443402.html