Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s/update-03032023-multiple-vulnerabilities-generex-ups-cs141 - https://www.generex.de/support/changelogs/cs141/page:2 - https://www.generex.de/support/changelogs/cs141/2-12
CVE ID: CVE-2022-47191 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T19:03:20.719Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Generex Products: UPS CS141 Problem Types: CWE-20 Description: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multiple-vulnerabilities-generex-ups-cs141 - https://www.generex.de/support/changelogs/cs141/page:2
ries/update-03032023-multiple-vulnerabilities-generex-ups-cs141 - https://www.generex.de/support/changelogs/cs141/page:2 - https://www.generex.de/support/changelogs/cs141/2-12
CVE ID: CVE-2022-47192 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T19:02:51.017Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Generex Products: UPS CS141 Problem Types: CWE-20 Description: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multiple-vulnerabilities-generex-ups-cs141 - https://www.generex.
ert.es/en/early-warning/ics-advisories/update-03032023-multiple-vulnerabilities-generex-ups-cs141 - https://www.generex.de/support/changelogs/cs141/page:2 - https://www.generex.de/support/changelogs/cs141/2-12
CVE ID: CVE-2022-47194 State: PUBLISHED Published: 2023-01-19T17:02:10.446Z Last Updated: 2025-11-04T19:14:26.423Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Ghost Foundation Products: Ghost Problem Types: CWE-453 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vul
an send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `twitter` field for a user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686
CVE ID: CVE-2022-47195 State: PUBLISHED Published: 2023-01-19T17:02:15.655Z Last Updated: 2025-11-04T19:14:27.525Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Ghost Foundation Products: Ghost Problem Types: CWE-453 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vul
an send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `facebook` field for a user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686
CVE ID: CVE-2022-47196 State: PUBLISHED Published: 2023-01-19T17:02:15.737Z Last Updated: 2025-11-04T19:14:28.608Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Ghost Foundation Products: Ghost Problem Types: CWE-453 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vul
an send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_head` for a post. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686
CVE ID: CVE-2022-47197 State: PUBLISHED Published: 2023-01-19T17:02:15.814Z Last Updated: 2025-11-04T19:14:29.704Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Ghost Foundation Products: Ghost Problem Types: CWE-453 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vul
an send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_foot` for a post. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686
CVE ID: CVE-2022-47208 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T17:31:53.707Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router Problem Types: Command Injection Description: The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2022-37
CVE ID: CVE-2022-47209 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:11:26.955Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router Problem Types: Hardcoded Credentials Description: A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2022-37
CVE ID: CVE-2022-47210 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:03:54.393Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router Problem Types: Command Injection Description: The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2022-37
CVE ID: CVE-2022-47211 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2025-07-22T17:49:58.841Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-47211
CVE ID: CVE-2022-47212 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2025-07-22T17:49:59.400Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-47212
CVE ID: CVE-2022-47213 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2025-07-22T17:49:59.882Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-47213
CVE ID: CVE-2022-47311 State: PUBLISHED Published: 2023-05-22T22:12:51.152Z Last Updated: 2025-01-16T21:32:39.562Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: Dataprobe, Inc. Products: Dataprobe iBoot-PDU FW Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection. Additional Analyst Notes: - CVE
alue for username and password, which allows successful authentication for a connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03 - https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf
CVE ID: CVE-2022-47317 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T14:59:28.992Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-Server Problem Types: Out-of-bounds Write Description: Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU92811888/index.html
CVE ID: CVE-2022-47318 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T15:54:32.976Z Vendors: ruby-git Products: ruby-git Problem Types: Code injection Description: ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ruby-git/ruby-git - https://github.com/ruby-git/ruby-git/pull/602 - https://jvn.jp/en/jp/JVN16765254/index.html - https://lists.fedoraproject
ttps://github.com/ruby-git/ruby-git/pull/602 - https://jvn.jp/en/jp/JVN16765254/index.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html
CVE ID: CVE-2022-47320 State: PUBLISHED Published: 2023-05-22T22:30:59.073Z Last Updated: 2025-01-16T21:32:32.071Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Dataprobe, Inc. Products: Dataprobe iBoot-PDU FW Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-0
Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03 - https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf
CVE ID: CVE-2022-47322 State: PUBLISHED Published: 2023-02-06T05:27:41.571Z Last Updated: 2025-03-26T14:11:42.290Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47323 State: PUBLISHED Published: 2023-02-06T05:27:42.500Z Last Updated: 2025-03-26T14:11:01.234Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47324 State: PUBLISHED Published: 2023-02-06T05:27:43.453Z Last Updated: 2025-03-26T14:10:08.290Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47325 State: PUBLISHED Published: 2023-02-06T05:27:44.418Z Last Updated: 2025-03-26T14:09:17.063Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47326 State: PUBLISHED Published: 2023-02-06T05:27:45.370Z Last Updated: 2025-03-26T14:07:40.768Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47327 State: PUBLISHED Published: 2023-02-06T05:27:46.317Z Last Updated: 2025-03-25T17:50:25.583Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47328 State: PUBLISHED Published: 2023-02-06T05:27:47.489Z Last Updated: 2025-03-26T14:05:11.913Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47329 State: PUBLISHED Published: 2023-02-06T05:27:48.450Z Last Updated: 2025-03-26T14:04:16.202Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47330 State: PUBLISHED Published: 2023-02-06T05:27:49.399Z Last Updated: 2025-03-26T18:49:11.600Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47331 State: PUBLISHED Published: 2023-02-06T05:26:49.877Z Last Updated: 2025-03-26T13:45:10.181Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47332 State: PUBLISHED Published: 2023-02-06T05:27:51.564Z Last Updated: 2025-03-26T18:49:59.956Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47333 State: PUBLISHED Published: 2023-02-06T05:27:53.182Z Last Updated: 2025-03-26T18:50:18.018Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47334 State: PUBLISHED Published: 2023-05-09T01:21:38.138Z Last Updated: 2025-01-28T17:04:00.253Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47335 State: PUBLISHED Published: 2023-04-11T11:09:42.407Z Last Updated: 2025-02-10T19:24:04.047Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1645429273135218690
CVE ID: CVE-2022-47336 State: PUBLISHED Published: 2023-04-11T11:09:43.390Z Last Updated: 2025-02-10T19:21:01.931Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1645429273135218690
CVE ID: CVE-2022-47337 State: PUBLISHED Published: 2023-04-11T11:09:44.468Z Last Updated: 2025-02-10T18:56:46.421Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In media service, there is a missing permission check. This could lead to local denial of service in media service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1645429273135218690
CVE ID: CVE-2022-47338 State: PUBLISHED Published: 2023-04-11T11:09:45.470Z Last Updated: 2025-02-10T17:25:24.486Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1645429273135218690
CVE ID: CVE-2022-47339 State: PUBLISHED Published: 2023-02-06T05:26:48.923Z Last Updated: 2025-03-26T13:46:58.474Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-47340 State: PUBLISHED Published: 2023-05-09T01:21:22.843Z Last Updated: 2025-01-28T17:22:15.806Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761