Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10005 State: PUBLISHED Published: 2021-10-28T00:00:00 Last Updated: 2024-08-04T10:50:57.480Z Vendors: Apple Products: macOS Problem Types: An attacker in a privileged network position may be able to perform denial of service Description: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1246
CVE ID: CVE-2020-10006 State: PUBLISHED Published: 2020-12-08T19:59:22 Last Updated: 2024-08-04T10:50:57.811Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to access restricted files Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-10007 State: PUBLISHED Published: 2020-12-08T20:03:08 Last Updated: 2024-08-04T10:50:57.847Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to determine kernel memory layout Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10008 State: PUBLISHED Published: 2021-04-02T17:23:36 Last Updated: 2024-08-04T10:50:57.853Z Vendors: Apple Products: macOS Problem Types: A malicious application with root privileges may be able to access private information Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931
CVE ID: CVE-2020-10009 State: PUBLISHED Published: 2020-12-08T20:00:11 Last Updated: 2024-08-04T10:50:57.912Z Vendors: Apple Products: macOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10010 State: PUBLISHED Published: 2020-12-08T20:01:31 Last Updated: 2024-08-04T10:50:57.446Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: A local attacker may be able to elevate their privileges Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT
https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10011 State: PUBLISHED Published: 2020-12-08T20:02:48 Last Updated: 2024-08-04T10:50:57.259Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.appl
ation or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211849 - https://support.apple.com/kb/HT211930 - https://support.apple.com/kb/HT211931 - https://support.apple.com/en-us/HT211929 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-10012 State: PUBLISHED Published: 2020-12-08T20:03:25 Last Updated: 2024-08-04T10:50:57.383Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted document may lead to a cross site scripting attack Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted document may lead to a cross site scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10013 State: PUBLISHED Published: 2020-12-08T20:01:47 Last Updated: 2024-08-04T10:50:57.546Z Vendors: Apple Products: tvOS, iOS and iPadOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211849 - https://support.apple.com/en-us/HT211843 - https://support.apple.com/en-us/HT211850
CVE ID: CVE-2020-10014 State: PUBLISHED Published: 2020-12-08T20:03:56 Last Updated: 2024-08-04T10:50:57.398Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to break out of its sandbox Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10015 State: PUBLISHED Published: 2021-04-02T17:26:53 Last Updated: 2024-08-04T10:50:57.352Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-10016 State: PUBLISHED Published: 2020-12-08T20:03:44 Last Updated: 2024-08-04T10:50:57.352Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-
s: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10017 State: PUBLISHED Published: 2020-12-08T20:06:47 Last Updated: 2024-08-04T10:50:57.392Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.
ferences: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-10018 State: PUBLISHED Published: 2020-03-02T22:11:56 Last Updated: 2024-08-04T10:50:57.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=204342#c21 - https://webkitgtk.org/security/WSA-2020-0003.html - https://wpewebkit.org/security/WSA-2020-0003.html - https://www.debian.org/security/2020/dsa-4641 -
WSA-2020-0003.html - https://wpewebkit.org/security/WSA-2020-0003.html - https://www.debian.org/security/2020/dsa-4641 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLERWAS2LL7SX2GHA2DDZ2PL3QC5OHIF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOR5LPL4UASVAR76EIHCL4O2KGDWGC6K/ - https://usn.ubuntu.com/4310-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html - https://security.gentoo.org/glsa/202006-08
CVE ID: CVE-2020-10019 State: PUBLISHED Published: 2020-05-11T22:26:11.452886Z Last Updated: 2024-09-17T02:12:14.643Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-120 Description: USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/bro
er versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-25 - https://github.com/zephyrproject-rtos/zephyr/pull/23190 - https://github.com/zephyrproject-rtos/zephyr/pull/23457 - https://github.com/zephyrproject-rtos/zephyr/pull/23460 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10019
CVE ID: CVE-2020-10020 State: REJECTED Published: 2020-03-06T23:50:29 Last Updated: 2020-03-06T23:50:29 Description: No description available.
CVE ID: CVE-2020-10021 State: PUBLISHED Published: 2020-05-11T22:26:11.985594Z Last Updated: 2024-09-17T00:16:14.926Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-787 Description: Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024, NCC-ZEP-025, NCC-ZEP-026 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-26 - https://github.com/zephyrproject-rtos/zephyr/pull/23240 - https:/
ps://zephyrprojectsec.atlassian.net/browse/ZEPSEC-26 - https://github.com/zephyrproject-rtos/zephyr/pull/23240 - https://github.com/zephyrproject-rtos/zephyr/pull/23455 - https://github.com/zephyrproject-rtos/zephyr/pull/23456 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10021
CVE ID: CVE-2020-10022 State: PUBLISHED Published: 2020-05-11T22:26:12.494138Z Last Updated: 2024-09-16T23:45:41.536Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-120 Description: A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojects
ersion 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-28 - https://github.com/zephyrproject-rtos/zephyr/pull/24154 - https://github.com/zephyrproject-rtos/zephyr/pull/24065 - https://github.com/zephyrproject-rtos/zephyr/pull/24066 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10022
CVE ID: CVE-2020-10023 State: PUBLISHED Published: 2020-05-11T22:26:13.032987Z Last Updated: 2024-09-16T18:03:31.215Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-120 Description: The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in denial of service or possibly code execution within the Zephyr kernel. See NCC-NCC-019 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https:
ater versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-29 - https://github.com/zephyrproject-rtos/zephyr/pull/23304 - https://github.com/zephyrproject-rtos/zephyr/pull/23646 - https://github.com/zephyrproject-rtos/zephyr/pull/23649 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10023
CVE ID: CVE-2020-10024 State: PUBLISHED Published: 2020-05-11T22:26:13.572574Z Last Updated: 2024-09-17T01:56:05.691Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-697 Description: The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrp
ions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-30 - https://github.com/zephyrproject-rtos/zephyr/pull/23323 - https://github.com/zephyrproject-rtos/zephyr/pull/23535 - https://github.com/zephyrproject-rtos/zephyr/pull/23498 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10024
CVE ID: CVE-2020-10025 State: REJECTED Published: 2020-05-11T22:26:14 Last Updated: 2020-05-11T22:26:14 Description: No description available.
CVE ID: CVE-2020-10026 State: REJECTED Published: 2020-05-11T22:26:14 Last Updated: 2020-05-11T22:26:14 Description: No description available.
CVE ID: CVE-2020-10027 State: PUBLISHED Published: 2020-05-11T22:26:14.923233Z Last Updated: 2024-09-16T20:52:35.670Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-697 Description: An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-35 - https://github.com/zephyrproject-rtos/zephyr/pull/23328 -
: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-35 - https://github.com/zephyrproject-rtos/zephyr/pull/23328 - https://github.com/zephyrproject-rtos/zephyr/pull/23500 - https://github.com/zephyrproject-rtos/zephyr/pull/23499 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10027
CVE ID: CVE-2020-10028 State: PUBLISHED Published: 2020-05-11T22:26:15.474877Z Last Updated: 2024-09-16T17:09:14.800Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-20 Description: Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-32 - https://github.com/zephyrproject-rtos/zephyr/pull/23308 - https://github.com/zephyrproject-rtos/zephyr/pull/23733 - https
ttps://github.com/zephyrproject-rtos/zephyr/pull/23308 - https://github.com/zephyrproject-rtos/zephyr/pull/23733 - https://github.com/zephyrproject-rtos/zephyr/pull/23737 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10028
CVE ID: CVE-2020-10029 State: PUBLISHED Published: 2020-03-04T00:00:00 Last Updated: 2024-08-04T10:50:57.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25487 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=9333498794cde1d5cca5
g/bugzilla/show_bug.cgi?id=25487 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=9333498794cde1d5cca518badf79533a24114b6f - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00033.html - https://security.netapp.com/advisory/ntap-20200327-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/23N76M3EDP2GIW4GOIQRYTKRE7PPBRB2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU5JJGENOK7K4X5RYAA5PL647C6HD22E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTFUD5VH2GU3YOXA2KBQSBIDZRDWNZ3/ - https://security.gento
hives/list/package-announce%40lists.fedoraproject.org/message/JZTFUD5VH2GU3YOXA2KBQSBIDZRDWNZ3/ - https://security.gentoo.org/glsa/202006-04 - https://usn.ubuntu.com/4416-1/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
CVE ID: CVE-2020-10030 State: PUBLISHED Published: 2020-05-19T15:52:20 Last Updated: 2024-08-04T10:50:57.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname() does not have '\0' termination of the returned string if the hostname is larger than the supplied buffer. (Linux systems are not affected because the buffer is always large enough. OpenBSD systems are not affected because the returned hos
ms are not affected because the buffer is always large enough. OpenBSD systems are not affected because the returned hostname always has '\0' termination.) Under some conditions, this issue can lead to the writing of one '\0' byte out-of-bounds on the stack, causing a denial of service or possibly arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00052.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PS4ZN5XGENYNFKX7QIIOUCQQHXE37GJF/ - https://lists
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/PS4ZN5XGENYNFKX7QIIOUCQQHXE37GJF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMP72NJGKBWR5WEBXAWX5KSLQUDFTG6S/
CVE ID: CVE-2020-10037 State: PUBLISHED Published: 2020-07-14T13:18:04 Last Updated: 2024-08-04T10:50:57.769Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-125 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10038 State: PUBLISHED Published: 2020-07-14T13:18:04 Last Updated: 2024-08-04T10:50:57.789Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-306 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the device's web server might be able to execute administrative commands without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10039 State: PUBLISHED Published: 2020-07-14T13:18:04 Last Updated: 2024-08-04T10:50:57.303Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-311 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to the transmitted data. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf