Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-30224 State: PUBLISHED Published: 2022-07-12T22:37:51 Last Updated: 2025-07-08T15:36:10.090Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service P
on), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3
l Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30224
CVE ID: CVE-2022-30225 State: PUBLISHED Published: 2022-07-12T22:37:52 Last Updated: 2025-07-08T15:36:10.696Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service
tion), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-gui
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30225
CVE ID: CVE-2022-30226 State: PUBLISHED Published: 2022-07-12T22:37:53 Last Updated: 2025-07-08T15:36:11.390Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service
SA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30226
CVE ID: CVE-2022-30228 State: PUBLISHED Published: 2022-06-14T09:21:48 Last Updated: 2025-11-12T07:22:08.322Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: SICAM GridEdge (Classic) Problem Types: CWE-346 Description: A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf
ecuted. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.siemens.com/productcert/html/ssa-631336.html
CVE ID: CVE-2022-30229 State: PUBLISHED Published: 2022-06-14T09:21:50 Last Updated: 2025-11-12T07:22:09.535Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: SICAM GridEdge (Classic) Problem Types: CWE-306 Description: A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf
al Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.siemens.com/productcert/html/ssa-631336.html
CVE ID: CVE-2022-30230 State: PUBLISHED Published: 2022-06-14T09:21:51 Last Updated: 2025-11-12T07:22:10.726Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: SICAM GridEdge (Classic) Problem Types: CWE-306 Description: A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.
E Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.siemens.com/productcert/html/ssa-631336.html
CVE ID: CVE-2022-30231 State: PUBLISHED Published: 2022-06-14T09:21:53 Last Updated: 2025-11-12T07:22:11.891Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Siemens Products: SICAM GridEdge (Classic) Problem Types: CWE-402 Description: A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.siemens.com/productcert/html/
es: - https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf - https://cert-portal.siemens.com/productcert/html/ssa-631336.html
CVE ID: CVE-2022-30232 State: PUBLISHED Published: 2022-06-02T22:45:16.738384Z Last Updated: 2024-09-17T04:14:08.935Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: Power Logic ION Setup Problem Types: CWE-20 Description: A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/docu
(V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-01/
CVE ID: CVE-2022-30233 State: PUBLISHED Published: 2022-06-02T22:45:18.223723Z Last Updated: 2024-09-17T03:29:05.313Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-20 Description: A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when the user is tricked into performing certain actions on a webpage. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30234 State: PUBLISHED Published: 2022-06-02T22:45:19.768519Z Last Updated: 2024-09-16T19:04:21.194Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30235 State: PUBLISHED Published: 2022-06-02T22:45:21.168189Z Last Updated: 2024-09-16T17:59:43.987Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-307 Description: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30236 State: PUBLISHED Published: 2022-06-02T22:45:22.767960Z Last Updated: 2024-09-16T23:00:39.820Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-669 Description: A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30237 State: PUBLISHED Published: 2022-06-02T22:45:24.206860Z Last Updated: 2024-09-17T01:57:03.909Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-311 Description: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30238 State: PUBLISHED Published: 2022-06-02T22:45:25.728616Z Last Updated: 2024-09-17T03:29:08.122Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Schneider Electric Products: Wiser Smart Problem Types: CWE-287 Description: A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2022-130-03/
CVE ID: CVE-2022-30239 State: PUBLISHED Published: 2022-05-09T17:15:09 Last Updated: 2024-08-03T06:40:47.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971. Additional Analyst Notes: - CVE Program Container: References: - https://www.magnitude.com/products/data-connectivity - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-d
/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
CVE ID: CVE-2022-30240 State: PUBLISHED Published: 2022-05-09T17:15:14 Last Updated: 2024-08-03T06:40:47.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972. Additional Analyst Notes: - CVE Program Container: References: - https://www.magnitude.com/products/data-connectivity - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena
es/redshift-and-athena-driver-vulnerability/ - https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
CVE ID: CVE-2022-30241 State: PUBLISHED Published: 2022-05-04T17:29:55 Last Updated: 2024-08-03T06:40:47.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abodelot/jquery.json-viewer/pull/26 - https://www.npmjs.com/package/jquery.json-viewer
CVE ID: CVE-2022-30242 State: PUBLISHED Published: 2022-07-15T11:40:09 Last Updated: 2024-08-03T06:40:47.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller configuration without the knowledge of other users, altering the controller's function capabilities. The changed configuration is not updated in the User Interface, which creates an inconsistency between the configuration display and the
iguration is not updated in the User Interface, which creates an inconsistency between the configuration display and the actual configuration on the controller. After the configuration change, remediation requires reverting to the correct configuration, requiring either physical or remote access depending on the configuration that was altered. Additional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com - https://www.honeywell.com/us/en/product-security - https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities
CVE ID: CVE-2022-30243 State: PUBLISHED Published: 2022-07-15T11:40:15 Last Updated: 2024-08-03T06:40:47.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function. Additional Analyst Notes: - CVE P
overwritten in order for the controller to restore its original operational function. Additional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com - https://www.honeywell.com/us/en/product-security - https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities
CVE ID: CVE-2022-30244 State: PUBLISHED Published: 2022-07-15T11:40:22 Last Updated: 2024-08-03T06:40:47.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function. Additional Analyst
am needs to be overwritten in order for the controller to restore its original operational function. Additional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com - https://www.honeywell.com/us/en/product-security - https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities
CVE ID: CVE-2022-30245 State: PUBLISHED Published: 2022-07-15T11:40:28 Last Updated: 2024-08-03T06:40:47.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller configuration without the knowledge of other users, altering the controller's function capabilities. The changed configuration is not updated in the User Interface, which creates an inconsistency between the configuration display and the actual configuration on
in the User Interface, which creates an inconsistency between the configuration display and the actual configuration on the controller. After the configuration change, remediation requires reverting to the correct configuration, requiring either physical or remote access depending on the configuration that was altered. Additional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com - https://www.honeywell.com/us/en/product-security - https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities
CVE ID: CVE-2022-30256 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:40:33.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names. Additional Analyst Notes: - CVE Program Container: - C
nd overcomes current mitigation patches for "Ghost" domain names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://maradns.samiam.org/ - https://maradns.samiam.org/security.html#CVE-2022-30256 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB7LDZM5AGWC5BHHQHW6CP5OFNBBKFOQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3VSMLJX25MXGQ6A7UPOGK7VPUVDESPHL/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00019.html - https://www.debian.org/security/2023/dsa-5441
CVE ID: CVE-2022-30257 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T15:02:04.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names. Additional Analyst Notes: - CVE Program Container: -
and overcomes current mitigation patches for "Ghost" domain names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81
CVE ID: CVE-2022-30258 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T15:03:15.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names. Additional Analyst Notes: - CVE Program Container: -
CVE ID: CVE-2022-30260 State: PUBLISHED Published: 2022-12-26T00:00:00 Last Updated: 2024-08-03T06:40:47.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
CVE ID: CVE-2022-30262 State: PUBLISHED Published: 2022-08-17T14:27:08 Last Updated: 2024-08-03T06:40:47.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa
cks. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-02
CVE ID: CVE-2022-30264 State: PUBLISHED Published: 2022-08-16T12:42:58 Last Updated: 2024-08-03T06:40:47.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/adv
lyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04