Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8441 State: PUBLISHED Published: 2020-02-19T16:19:12 Last Updated: 2024-08-04T09:56:28.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mbechler/marshalsec - https://github.com/mbechler/marshalsec/blob/master/marshalsec.pdf - https://sourceforge.net/p/jyaml/bugs/ - https://gist.github.com/j0lt-github/f5141abcacae63d434ecae211422153a - https://security.netapp.com/advisory/ntap-20200313-0001/
CVE ID: CVE-2020-8442 State: PUBLISHED Published: 2020-01-30T00:34:40 Last Updated: 2024-08-04T09:56:28.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1820 - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8443 State: PUBLISHED Published: 2020-01-30T00:34:28 Last Updated: 2024-08-04T09:56:28.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1816 - https://security.gentoo.org/gl
/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1816 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8444 State: PUBLISHED Published: 2020-01-30T00:33:52 Last Updated: 2024-08-04T09:56:28.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1817 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8445 State: PUBLISHED Published: 2020-01-30T00:33:43 Last Updated: 2024-08-04T09:56:28.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages. In many cases, those characters are later logged. Because newlines (\n) are permitted in messages processed by ossec-analysisd, it may be possible to inject nested events into the ossec log. Use of terminal control characters may allow obfuscating events or executing commands when viewed through vulnerable terminal emulators. This may be an unauthenticated re
cating events or executing commands when viewed through vulnerable terminal emulators. This may be an unauthenticated remote attack for certain types and origins of logged data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1814 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8446 State: PUBLISHED Published: 2020-01-30T00:33:32 Last Updated: 2024-08-04T09:56:28.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write access) via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1813 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8447 State: PUBLISHED Published: 2020-01-30T00:33:18 Last Updated: 2024-08-04T09:56:28.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1818 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8448 State: PUBLISHED Published: 2020-01-30T00:32:38 Last Updated: 2024-08-04T09:56:28.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1821 - https://www.ossec.net/ - https://github.com/ossec/ossec-hids/issues/1815 - https://security.gentoo.org/glsa/202007-33
CVE ID: CVE-2020-8449 State: PUBLISHED Published: 2020-02-04T19:50:21 Last Updated: 2024-08-04T09:56:28.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Advisories/SQUID-2020_1.txt - http://www.squid-cache.org/Versions/v4/changesets/squid-4-d8e4715992d0e530871519549add5519cbac0598.patch - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c
dd5519cbac0598.patch - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patch - http://www.squid-cache.org/Versions/v4/changesets/squid-4-b3a0719affab099c684f1cd62b79ab02816fa962.patch - http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_1.patch - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patch - https://usn.ubuntu.com/4289-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.html - https://security.gentoo.org/glsa/202003-34 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/ - https://lists.fedorapro
ives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.html - https://www.debian.org/security/2020/dsa-4682 - https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html - https://security.netapp.com/advisory/ntap-20210304-0002/
CVE ID: CVE-2020-8450 State: PUBLISHED Published: 2020-02-04T19:51:21 Last Updated: 2024-08-04T09:56:28.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Advisories/SQUID-2020_1.txt - http://www.squid-cache.org/Versions/v4/changesets/squid-4-d8e4715992d0e530871519549add5519cbac0598.patch - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patch - http://www.squid-
.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patch - http://www.squid-cache.org/Versions/v4/changesets/squid-4-b3a0719affab099c684f1cd62b79ab02816fa962.patch - http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_1.patch - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patch - https://usn.ubuntu.com/4289-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.html - https://security.gentoo.org/glsa/202003-34 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/ - https://lists.fedoraproject.org/archives/list/package-an
s.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.html - https://www.debian.org/security/2020/dsa-4682 - https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html - https://security.netapp.com/advisory/ntap-20210304-0002/
CVE ID: CVE-2020-8461 State: PUBLISHED Published: 2020-12-17T21:05:45 Last Updated: 2024-08-04T10:03:44.691Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: CSRF Protection Bypass Description: A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan
00283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8462 State: PUBLISHED Published: 2020-12-17T21:05:45 Last Updated: 2024-08-04T10:03:44.665Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: XSS Description: A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8463 State: PUBLISHED Published: 2020-12-17T21:05:46 Last Updated: 2024-08-04T10:03:44.801Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: Authorization Bypass Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8464 State: PUBLISHED Published: 2020-12-17T21:05:46 Last Updated: 2024-08-04T10:03:44.846Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: Authentication Bypass Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-i
endmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8465 State: PUBLISHED Published: 2020-12-17T21:05:47 Last Updated: 2024-08-04T10:03:44.874Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: Command Execution Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-
dmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8466 State: PUBLISHED Published: 2020-12-17T21:05:48 Last Updated: 2024-08-04T10:03:44.800Z Vendors: Trend Micro Products: Trend Micro InterScan Web Security Virtual Appliance Problem Types: Unauthenticated Command Injection Description: A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vuln
://success.trendmicro.com/solution/000283077 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/
CVE ID: CVE-2020-8467 State: PUBLISHED Published: 2020-03-18T00:30:43.000Z Last Updated: 2025-10-21T23:35:48.024Z Vendors: Trend Micro Products: Trend Micro OfficeScan, Trend Micro Apex One Problem Types: RCE Description: A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000245571 - https://success.trendmicro.com/jp/solution/000244253
CVE ID: CVE-2020-8468 State: PUBLISHED Published: 2020-03-18T00:30:43.000Z Last Updated: 2025-10-21T23:35:47.868Z Vendors: Trend Micro Products: Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) Problem Types: Content Validation Escape Description: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/s
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000245571 - https://success.trendmicro.com/jp/solution/000244253 - https://success.trendmicro.com/solution/000245572 - https://success.trendmicro.com/jp/solution/000244836
CVE ID: CVE-2020-8469 State: PUBLISHED Published: 2020-03-12T23:05:15 Last Updated: 2024-08-04T10:03:45.524Z Vendors: Trend Micro Products: Trend Micro Password Manager for Windows Problem Types: DLL Hijacking Description: Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124168.aspx - http://seclists.org/fulldisclosure/2020/Jun/30
CVE ID: CVE-2020-8470 State: PUBLISHED Published: 2020-03-18T00:30:44 Last Updated: 2024-08-04T10:03:44.846Z Vendors: Trend Micro Products: Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) Problem Types: Directory Traversal Description: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000245571 - https://
ional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000245571 - https://success.trendmicro.com/jp/solution/000244253 - https://success.trendmicro.com/solution/000245572 - https://success.trendmicro.com/jp/solution/000244836
CVE ID: CVE-2020-8471 State: PUBLISHED Published: 2020-04-29T01:30:43 Last Updated: 2024-08-04T10:03:44.886Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Central Licensing System, ABB Ability System 800xA, Compact HMI, Control Builder Safe, Symphony Plus S+ Operations, Symphony Plus S+ Engineering , Composer Harmony, Composer Melody , Harmony OPC Server Standalone, Advant OCS Control Builder A, Composer CTK, AdvaBuild, OPC Server for Mod 300 (non-800xA), OPC Data Link, Knowledge Manager, Manufacturing Operations Management, Advant OCS AC 100 OPS Server Problem Types: CWE-275 Description: For the Central Licensing Server component used in ABB p
dvant OCS AC 100 OPS Server Problem Types: CWE-275 Description: For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OP
er A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, weak file permissions allow an authenticated attacker to block the license handling, escalate his/her privileges and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121231&LanguageCode=en&DocumentPartId=&Action=Launch - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121230&LanguageCode=en&DocumentPartId=&Action=La
on=Launch - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121230&LanguageCode=en&DocumentPartId=&Action=Launch - https://www.us-cert.gov/ics/advisories/icsa-20-154-04
CVE ID: CVE-2020-8472 State: PUBLISHED Published: 2020-04-28T23:52:41 Last Updated: 2024-08-04T10:03:45.938Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: OPC Server for AC 800M, Control Builder M Professional, MMS Server for AC 800M, Base Software for SoftControl Problem Types: CWE-732 Description: Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authentic
n 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2020-8473 State: PUBLISHED Published: 2020-04-28T23:52:44 Last Updated: 2024-08-04T10:03:44.806Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ABB Products: System 800xA Base Problem Types: CWE-732 Description: Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications. Additional Analyst Notes: - CVE Program Container: References: - https://se
ns to stop and to corrupt user applications. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2020-8474 State: PUBLISHED Published: 2020-04-22T14:18:35 Last Updated: 2024-08-04T10:03:44.868Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: System 800xA Base Problem Types: CWE-275 Description: Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2PAA121221&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2020-8475 State: PUBLISHED Published: 2020-04-29T00:00:00 Last Updated: 2024-08-04T10:03:44.814Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ABB Products: Central Licensing System, ABB Ability System 800xA, Compact HMI, Control Builder Safe, Symphony Plus S+ Operations, Symphony Plus S+ Engineering , Composer Harmony, Composer Melody , Harmony OPC Server Standalone, Advant OCS Control Builder A, Composer CTK, AdvaBuild, OPC Server for Mod 300 (non-800xA), OPC Data Link, Knowledge Manager, Manufacturing Operations Management, Advant OCS AC 100 OPS Server, ABB Ability™ SCADAvantage Problem Types: CWE-20 Description: For the Central Licensing Se
Advant OCS AC 100 OPS Server, ABB Ability™ SCADAvantage Problem Types: CWE-20 Description: For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, A