Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8333 State: PUBLISHED Published: 2016-10-28T20:00:00 Last Updated: 2024-08-06T02:20:30.766Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Iceni Argus 6.6.04 Problem Types: buffer overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93938 - http://www.talosintell
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93938 - http://www.talosintelligence.com/reports/2016-TALOS-0200/
CVE ID: CVE-2016-8334 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T02:20:30.475Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: Foxit Software Products: Foxit Reader Problem Types: out-of-bounds read Description: A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93799 - http://www.talosintelligence.com/reports/TALOS-2016-0201/
CVE ID: CVE-2016-8335 State: PUBLISHED Published: 2016-10-28T20:00:00 Last Updated: 2024-08-06T02:20:31.049Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Iceni Argus 6.6.04 (Sep 7 2012) NK - Linux x64 and 6.6.04 (Nov 14 2014) NK - Windows x64. Problem Types: buffer overflow Description: An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 (Sep 7 2012) NK - Linux x64 and Version 6.6.04 (Nov 14 2014) NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can send/provide malicious pdf file to trigger this
a buffer overflow resulting in arbitrary code execution. An attacker can send/provide malicious pdf file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93936 - http://www.talosintelligence.com/reports/2016-TALOS-0202/
CVE ID: CVE-2016-8338 State: REJECTED Published: 2016-10-26T10:00:00 Last Updated: 2018-03-12T01:57:01 Description: No description available.
CVE ID: CVE-2016-8339 State: PUBLISHED Published: 2016-10-28T14:00:00 Last Updated: 2024-08-06T02:20:30.582Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Redis Products: Redis Problem Types: Arbitrary Code Execution Description: A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution. Additional Analyst Notes: - CVE Program Container:
ad to an out of bounds write potentially resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93283 - https://security.gentoo.org/glsa/201702-16 - https://github.com/antirez/redis/commit/6d9f8e2462fc2c426d48c941edeb78e5df7d2977 - http://www.talosintelligence.com/reports/TALOS-2016-0206/
CVE ID: CVE-2016-8341 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.621Z Vendors: n/a Products: Ecava IntegraXor 5.0.413.0 Problem Types: Ecava IntegraXor SQL injection Description: An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95907 - https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02
CVE ID: CVE-2016-8342 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8343 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T02:20:30.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-278-01 - http://www.securityfocus.com/bid/93352
CVE ID: CVE-2016-8344 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.912Z Vendors: n/a Products: Honeywell Experion PKS through 431 Problem Types: Honeywell Experion PKS Improper Input Validation Vulnerability Description: An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C de
an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-301-01 - http://www.securityfocus.com/bid/93950
CVE ID: CVE-2016-8345 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8346 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.703Z Vendors: n/a Products: Moxa EDR-810 Industrial Secure Router Problem Types: Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability Description: An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log files (PRIVILEGE ESCALATION). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93800 - https://ics-cert.us-cert.gov/advisories/ICSA-16-294-01
CVE ID: CVE-2016-8347 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.916Z Vendors: n/a Products: Kabona AB WDC prior to Version 3.4.0 Problem Types: Kabona AB WDC brute force Description: An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. WDC does not limit authentication attempts that may allow a brute force attack method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93547 - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07
CVE ID: CVE-2016-8348 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.999Z Vendors: n/a Products: Emerson Liebert SiteScan 6.5, and prior Problem Types: Emerson Liebert SiteScan XML External Entity Vulnerability Description: An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-334-01 - http
onal Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-334-01 - http://www.securityfocus.com/bid/94587
CVE ID: CVE-2016-8349 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8350 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.698Z Vendors: n/a Products: Moxa ioLogik E1200 Series before 3.12 Problem Types: Moxa ioLogik E1200 Series CSRF Description: An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware Version V2.3 and prior, ioLogik E1241, firmware Version V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik
V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik E1262, firmware Version V2.4 and prior, ioLogik E2210, firmware versions prior to V3.13, ioLogik E2212, firmware versions prior to V3.14, ioLogik E2214, firmware versions prior to V3.12, ioLogik E2240, firmware versions prior to V3.12, ioLogik E2242, firmware versions prior to V3.12, ioLogik E2260, firmware versions prior to V3.13, and ioLogik E2262, firmware versions prior to V3.12. The web application may not sufficiently verify whether a request was provided by a valid user (CROSS-SITE REQUEST FORGERY). Additional Analyst Notes: - CVE Program Container: References: - ht
ovided by a valid user (CROSS-SITE REQUEST FORGERY). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-05 - http://www.securityfocus.com/bid/93550
CVE ID: CVE-2016-8352 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.055Z Vendors: n/a Products: Schneider Electric ConneXium TCSEFEC2* Problem Types: Schneider Electric ConneXium Buffer Overflow Vulnerability Description: An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versions, TCSEFEC23FCF21 all versions, and TCSEFEC2CF3F20 all versions. A stack-based buffer overflow can be triggered during the SNMP login authentication process that may allow an attacker to remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
an attacker to remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94062 - https://ics-cert.us-cert.gov/advisories/ICSA-16-306-01
CVE ID: CVE-2016-8353 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.047Z Vendors: n/a Products: OSIsoft PI Web API 2015 R2 1.5.1 Problem Types: OSIsoft PI Web API 2015 R2 Service Account Permissions Vulnerability Description: An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-01 - http://www.securityfocus.com/bid/93552
CVE ID: CVE-2016-8354 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.802Z Vendors: n/a Products: Schneider Electric Unity PRO Control prior to V11.1 Problem Types: Schneider Electric Unity PRO Control Flow Management Vulnerability Description: An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity project file can make the simulator execute malicious code by redirecting the control flow of these instructions. Additional Ana
file can make the simulator execute malicious code by redirecting the control flow of these instructions. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-306-03 - http://www.securityfocus.com/bid/93830
CVE ID: CVE-2016-8355 State: PUBLISHED Published: 2017-02-13T22:00:00 Last Updated: 2024-08-06T02:20:31.077Z Vendors: n/a Products: Smiths-Medical CADD-Solis Medication Safety Software through 3.1 Problem Types: Smiths-Medical CADD-Solis Medication Safety Software incorrect permissions Description: An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is re
aries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01 - http://www.securityfocus.com/bid/94630
CVE ID: CVE-2016-8356 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.963Z Vendors: n/a Products: Kabona AB WDC prior to Version 3.4.0 Problem Types: Kabona AB WDC XSS Description: An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. The web server URL inputs are not sanitized correctly, which may allow cross-site scripting vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93547 - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07
CVE ID: CVE-2016-8357 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.106Z Vendors: n/a Products: Lynxspring JENEsys BAS Bridge 1.1.8 and older Problem Types: Lynxspring JENEsys BAS Bridge authorization bypass Description: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94344 - https://ics-cert.us-cert.gov/advisories/ICSA-16-320-
m Container: References: - http://www.securityfocus.com/bid/94344 - https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01
CVE ID: CVE-2016-8358 State: PUBLISHED Published: 2017-02-13T22:00:00 Last Updated: 2024-08-06T02:20:30.891Z Vendors: n/a Products: Smiths-Medical CADD-Solis Medication Safety Software through 3.1 Problem Types: Smiths-Medical CADD-Solis Medication Safety Software MITM Description: An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-16-3
nts. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01 - http://www.securityfocus.com/bid/94630
CVE ID: CVE-2016-8359 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.054Z Vendors: n/a Products: Moxa ioLogik E1200 Series before 3.12 Problem Types: Moxa ioLogik E1200 Series XSS Description: An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware Version V2.3 and prior, ioLogik E1241, firmware Version V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik
V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik E1262, firmware Version V2.4 and prior, ioLogik E2210, firmware versions prior to V3.13, ioLogik E2212, firmware versions prior to V3.14, ioLogik E2214, firmware versions prior to V3.12, ioLogik E2240, firmware versions prior to V3.12, ioLogik E2242, firmware versions prior to V3.12, ioLogik E2260, firmware versions prior to V3.13, and ioLogik E2262, firmware versions prior to V3.12. The web application fails to sanitize user input, which may allow an attacker to inject script or execute arbitrary code (CROSS-SITE SCRIPTING). Additional Analyst Notes: - CVE Program Containe
cker to inject script or execute arbitrary code (CROSS-SITE SCRIPTING). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-05 - http://www.securityfocus.com/bid/93550
CVE ID: CVE-2016-8360 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.872Z Vendors: n/a Products: Moxa SoftCMS prior to Version 1.6 Problem Types: Moxa SoftCMS double free Description: An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 - http://www.securityfocus.com/bid/94394
CVE ID: CVE-2016-8361 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.089Z Vendors: n/a Products: Lynxspring JENEsys BAS Bridge 1.1.8 and older Problem Types: Lynxspring JENEsys BAS Bridge no password Description: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94344 - https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01
CVE ID: CVE-2016-8362 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.043Z Vendors: n/a Products: Moxa OnCell Problem Types: Moxa OnCell Security forceful browsing Description: An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. Any user is able to download log files by accessing a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://i
wnload log files by accessing a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01 - http://www.securityfocus.com/bid/94092
CVE ID: CVE-2016-8363 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.690Z Vendors: n/a Products: Moxa OnCell Problem Types: Moxa OnCell execute arbitrary OS commands Description: An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-c
cute arbitrary OS commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01 - http://www.securityfocus.com/bid/94092
CVE ID: CVE-2016-8364 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.928Z Vendors: n/a Products: IBHsoftec S7-SoftPLC CPX43 prior to 4.12b Problem Types: IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability Description: An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b. Object memory can read a network packet that is larger than the space that is available, a Heap-based Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94054 - https://ics-cert.us-cert.gov/advisories/ICSA-16-306-02
CVE ID: CVE-2016-8365 State: PUBLISHED Published: 2018-04-03T14:00:00Z Last Updated: 2024-09-16T16:58:56.438Z Vendors: OSIsoft Products: PI System software Problem Types: CWE-437 Description: OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (SDK) versions prior to PI SDK 2016, Version 1.4.6; PI Buffer Subsystem, versions prior to and including, Version 4.4; and PI Data Archive versions prior to PI Data Archive 2015, Version 3.4.395.64) operates between endpoints without a complete model of endpoint features potentially causing the product to perform actions based on
ween endpoints without a complete model of endpoint features potentially causing the product to perform actions based on this incomplete model, which could result in a denial of service. OSIsoft reports that in order to exploit the vulnerability an attacker would need to be locally connected to a server. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Additional Analyst Notes: - CVE Program Container: References: - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00308 - https://ics-cert.us-cert.gov/advisories/ICS-VU-313-03 - http://www.securityfocus.com/bid/94165
CVE ID: CVE-2016-8366 State: PUBLISHED Published: 2018-04-05T16:00:00Z Last Updated: 2024-09-16T21:08:54.504Z Vendors: Phoenix Contact Products: Phoenix Contact ILC PLCs Problem Types: CWE-312 Description: Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-313-01 - https://www.exploit-db.com/exploits/45586/ - http://www.securityfocus.com/bid/94163
CVE ID: CVE-2016-8367 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.241Z Vendors: n/a Products: Schneider Electric Magelis HMI Problem Types: Schneider Electric Magelis HMI Resource Consumption Description: An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe).
s XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker can open multiple connections to a targeted web server and keep connections open preventing new connections from being made, rendering the web server unavailable during an attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-02 - http://www.securityfocus.com/bid/94093