Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37144 State: PUBLISHED Published: 2021-07-29T17:25:02 Last Updated: 2024-08-04T01:16:03.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/32
CVE ID: CVE-2021-37145 State: PUBLISHED Published: 2021-09-07T22:22:41 Last Updated: 2024-08-04T01:16:03.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution capability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.polycom.com/content/support.html - https://support.polycom.com/content/dam/polycom-support/global/documentation/security-bulleti
com/content/support.html - https://support.polycom.com/content/dam/polycom-support/global/documentation/security-bulletin-cx5100-cx5500-authenticated-v1-0.pdf
CVE ID: CVE-2021-37146 State: PUBLISHED Published: 2021-09-28T12:08:38 Last Updated: 2024-08-04T01:16:03.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in ros_comm via a crafted XMLRPC call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ros/ros_comm - https://discourse.ros.org/t/new-packages-for-melodic-2021-09-27/22446 - https://discourse.ros.org/t/new-packages-for-noetic-2021-09-27/22447
CVE ID: CVE-2021-37147 State: PUBLISHED Published: 2021-11-03T15:20:19 Last Updated: 2024-08-04T01:16:02.883Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-20, CWE-444 Description: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 - https://www.debian.org/security/2022/dsa-5153
CVE ID: CVE-2021-37148 State: PUBLISHED Published: 2021-11-03T15:20:20 Last Updated: 2024-08-04T01:16:03.219Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-20 Description: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 - https://www.debian.org/security/2022/dsa-5153
CVE ID: CVE-2021-37149 State: PUBLISHED Published: 2021-11-03T15:20:22 Last Updated: 2024-08-04T01:16:03.937Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-20 Description: Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 - https://www.debian.org/security/2022/dsa-5153
CVE ID: CVE-2021-37150 State: PUBLISHED Published: 2022-08-10T00:00:00.000Z Last Updated: 2025-09-08T18:45:49.320Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-20 Description: Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. This issue affects Apache Traffic Server 8.0.0 to 9.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21 - https://www.debian.org/security/2022/dsa-5206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
n.org/security/2022/dsa-5206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCSBQBYPOZSWS5LCOAQ6LJLRLXFIAW5A/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00019.html
CVE ID: CVE-2021-37151 State: PUBLISHED Published: 2021-09-01T12:35:08 Last Updated: 2024-08-04T01:16:02.865Z Vendors: CyberArk Products: Identity Problem Types: Username Enumeration Vulnerability Description: CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy configurations with MFA, the API response length can be used to differentiate between a valid user and an invalid one (aka Username Enumeration). Response differentiation enables attackers to enumerate usernames of valid application users. Attackers can use this information to leverage brute-force and dictionary attacks in order
of valid application users. Attackers can use this information to leverage brute-force and dictionary attacks in order to discover valid account information such as passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberark.com/products/ - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-37152 State: PUBLISHED Published: 2021-08-10T13:25:43 Last Updated: 2024-08-04T01:16:02.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com - https://support.sonatype.com/hc/en-us/articles/4404115639827
CVE ID: CVE-2021-37153 State: PUBLISHED Published: 2021-08-25T20:05:54 Last Updated: 2024-08-04T01:16:03.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the Identity Store, has an authentication-bypass issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.forgerock.com/platform/access-management - https://backstage.forgerock.com/knowledge/kb/article/a55763454
CVE ID: CVE-2021-37154 State: PUBLISHED Published: 2021-08-25T20:02:53 Last Updated: 2024-08-04T01:16:03.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion. Additional Analyst Notes: - CVE Program Container: References: - https://www.forgerock.com/platform/access-management - https://backstage.forgerock.com/knowledge/kb/article/a55763454
CVE ID: CVE-2021-37155 State: PUBLISHED Published: 2021-07-21T13:43:01 Last Updated: 2024-08-04T01:16:04.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/3990 - https://github.com/wolfSSL/wolfssl/releases/tag/v4.8.0-stable
CVE ID: CVE-2021-37156 State: PUBLISHED Published: 2021-08-05T20:36:35 Last Updated: 2024-08-04T01:16:02.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/news/132
CVE ID: CVE-2021-37157 State: PUBLISHED Published: 2021-11-09T23:12:44 Last Updated: 2024-08-04T01:16:03.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. $HOME/OGP/Cfg/Config.pm has the root password in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenGamePanel/OGP-Agent-Linux/commits/master - https://www.exploit-db.com/exploits/50373
CVE ID: CVE-2021-37158 State: PUBLISHED Published: 2021-11-09T23:11:10 Last Updated: 2024-08-04T01:16:03.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50373 - https://github.com/OpenGamePanel/OGP-Website/pull/561
CVE ID: CVE-2021-37159 State: PUBLISHED Published: 2021-07-21T00:00:00 Last Updated: 2024-08-04T01:16:03.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-usb/msg202228.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://secur
n.org/debian-lts-announce/2021/12/msg00012.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20210819-0003/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6ecfb39ba9d7316057cea823b196b734f6b18ca - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dcb713d53e2eadf42b878c12a471e74dc6ed3145 - https://bugzilla.suse.com/show_bug.cgi?id=1188601
CVE ID: CVE-2021-37160 State: PUBLISHED Published: 2021-08-02T12:43:57 Last Updated: 2024-08-04T01:16:03.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation (e.g., cryptographic signature validation) during a File Upload for a firmware update. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=
s.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37160-bulletin---no-firmware-update-validation.pdf?rev=c7f94647037c4007992e2e626d445561&hash=E89531490070A809FB74994018BA1248
CVE ID: CVE-2021-37161 State: PUBLISHED Published: 2021-08-02T12:42:47 Last Updated: 2024-08-04T01:16:03.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. A buffer overflow allows an attacker to overwrite an internal queue data structure and can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cv
com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37161-bulletin---underflow-in-udprxthread.pdf?rev=9395dad86d0b4811ae4a9e37f0568c2e&hash=3D8571C7A3DCC8B7D8DCB89C2DA4BB8D
CVE ID: CVE-2021-37162 State: PUBLISHED Published: 2021-08-02T12:49:00 Last Updated: 2024-08-04T01:16:03.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy and possible remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-d
- https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37162-bulletin---overflow-in-sccprocessmsg.pdf?rev=55a2a1d76199435688a8479970fc54bf&hash=4FDAB2F0EB319F0B773500669D67F3AD
CVE ID: CVE-2021-37163 State: PUBLISHED Published: 2021-08-02T12:46:57 Last Updated: 2024-08-04T01:16:03.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C
en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37163-bulletin---default-credentials-for-the-telnet-server.pdf?rev=da64c389a475494985b9fd2c2c508542&hash=466A7109AF08EBFF3756B2C25968ED5E
CVE ID: CVE-2021-37164 State: PUBLISHED Published: 2021-08-02T12:47:50 Last Updated: 2024-08-04T01:16:02.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-inform
lthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37164-bulletin---off-by-three-stack-overflow-in-tcptxthread.pdf?rev=daf615075c71484c8059c906872a51e6&hash=1FCC1A5D921E231D71E6B95A9AA8B741
CVE ID: CVE-2021-37165 State: PUBLISHED Published: 2021-08-02T10:48:40 Last Updated: 2024-08-04T01:16:03.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documen
lthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37165-bulletin---overflow-in-hmiprocessmsg.pdf?rev=2e2678dab62b41ba999cd6d1e03974ca&hash=F465ACE2C7FAED826B52FE996E36ACEC - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20
CVE ID: CVE-2021-37166 State: PUBLISHED Published: 2021-08-02T12:44:43 Last Updated: 2024-08-04T01:16:02.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When HMI3 starts up, it binds a local service to a TCP port on all interfaces of the device, and takes extensive time for the GUI to connect to the TCP socket, allowing the connection to be hijacked by an external attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https:
attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37166-bulletin---gui-socket-denial-of-service.pdf?rev=05321b2af1064eb2a6d6e6bf77604c6b&hash=40A927FE1153AA980428C93B2EF7EB40
CVE ID: CVE-2021-37167 State: PUBLISHED Published: 2021-08-02T12:45:52 Last Updated: 2024-08-04T01:16:03.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of the functionality of the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisslog-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security
log-healthcare.com - https://www.armis.com/PwnedPiper - https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20 - https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37167-bulletin---privilege-escalation.pdf?rev=20c909e5f00048838620b52471f266fc&hash=F43731C7A882EEBB5CE28DFBC75933D3
CVE ID: CVE-2021-37172 State: PUBLISHED Published: 2021-08-10T10:35:34 Last Updated: 2024-08-04T01:16:03.220Z Vendors: Siemens Products: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Problem Types: CWE-287 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device. Additional Analyst No
lity does not occur when TIA Portal V13 SP1 or any later version was used to provision the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf
CVE ID: CVE-2021-37173 State: PUBLISHED Published: 2021-09-14T10:47:41 Last Updated: 2024-08-04T01:16:02.864Z Vendors: Siemens Products: RUGGEDCOM ROX MX5000, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000 Problem Types: CWE-269 Description: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions
M ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The command line interface of affected devices insufficiently restrict file read and write operations for low privileged users. This could allow an authenticated remote attacker to escalate privileges and gain root access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf
CVE ID: CVE-2021-37174 State: PUBLISHED Published: 2021-09-14T10:47:42 Last Updated: 2024-08-04T01:16:02.881Z Vendors: Siemens Products: RUGGEDCOM ROX MX5000, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000 Problem Types: CWE-250 Description: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions
M ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf