Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-18222 State: PUBLISHED Published: 2020-01-23T00:00:00 Last Updated: 2024-08-05T01:47:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks. Additional Analyst Notes: - CVE Program Container: References: - https://tls.mbed.org/tech-updates/security-advisories - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
visories/mbedtls-security-advisory-2019-12 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGDACU65MYZXXVPQP2EBHUJGOR4RWLVY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3GWQNONS7GRORXZJ7MOJFUEJ2ZJ4OUW/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
CVE ID: CVE-2019-18223 State: PUBLISHED Published: 2020-04-27T12:48:39 Last Updated: 2024-08-05T01:47:14.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or number field in the Edit Group form, (5) tagKey or tagValue field in the Recording Rules Configuration, or (6) txt_69735:/VemailAddress/value or txt_75767:/VemailFrom/value field in callrec/config. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tr
config. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18223-XSS-ZoomCallRecording
CVE ID: CVE-2019-18224 State: PUBLISHED Published: 2019-10-21T16:21:46 Last Updated: 2024-08-05T01:47:14.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libidn/libidn2/compare/libidn2-2.1.0...libidn2-2.1.1 - https://github.com/libidn/libidn2/commit/e4d1558aa2c1c04a05066ee8600f37603890ba8c - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12420 - https://usn.ubuntu.com/4168-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
//usn.ubuntu.com/4168-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDQVQ2XPV5BTZUFINT7AFJSKNNBVURNJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MINU5RKDFE6TKAFY5DRFN3WSFDS4DYVS/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.html - https://www.debian.org/security/2020/dsa-4613 - https://seclists.org/bugtraq/2020/Feb/4 - https://security.gentoo.org/glsa/202003-63
CVE ID: CVE-2019-18225 State: PUBLISHED Published: 2019-10-21T17:09:23 Last Updated: 2024-08-05T01:47:14.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX261055
CVE ID: CVE-2019-18226 State: PUBLISHED Published: 2019-10-31T21:21:04 Last Updated: 2024-08-05T01:47:14.078Z Vendors: n/a Products: Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders Problem Types: CWE-294 Description: Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-04
CVE ID: CVE-2019-18227 State: PUBLISHED Published: 2019-10-31T21:01:42 Last Updated: 2024-08-05T01:47:14.115Z Vendors: n/a Products: Advantech WISE-PaaS/RMM Problem Types: CWE-611 Description: Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-954/ - https://www.zerodayinitiative.com/advisories/ZDI-19-944/ - https://www.zerodayinitiative.com/advisories/ZDI-19-936/ - https://www.zerodayinitiative.com/advisories/ZDI-19-945/ - https://www.zerodayinitiati
tive.com/advisories/ZDI-19-936/ - https://www.zerodayinitiative.com/advisories/ZDI-19-945/ - https://www.zerodayinitiative.com/advisories/ZDI-19-947/ - https://www.zerodayinitiative.com/advisories/ZDI-19-953/ - https://www.zerodayinitiative.com/advisories/ZDI-19-942/ - https://www.zerodayinitiative.com/advisories/ZDI-19-943/ - https://www.zerodayinitiative.com/advisories/ZDI-19-946/ - https://www.zerodayinitiative.com/advisories/ZDI-19-939/ - https://www.zerodayinitiative.com/advisories/ZDI-19-959/
CVE ID: CVE-2019-18228 State: PUBLISHED Published: 2019-10-31T21:09:16 Last Updated: 2024-08-05T01:47:14.023Z Vendors: n/a Products: Honeywell equIP series IP cameras Problem Types: CWE-20 Description: Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-02
CVE ID: CVE-2019-18229 State: PUBLISHED Published: 2019-10-31T21:05:02 Last Updated: 2024-08-05T01:47:13.988Z Vendors: n/a Products: Advantech WISE-PaaS/RMM Problem Types: CWE-89 Description: Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-949/ - https://www.zerodayinitiative.com/advisories/ZDI-19-940/ - https://www.zerodayinitiative.com/advisories/ZDI-19-938/ - https
ps://www.zerodayinitiative.com/advisories/ZDI-19-940/ - https://www.zerodayinitiative.com/advisories/ZDI-19-938/ - https://www.zerodayinitiative.com/advisories/ZDI-19-951/ - https://www.zerodayinitiative.com/advisories/ZDI-19-955/ - https://www.zerodayinitiative.com/advisories/ZDI-19-937/ - https://www.zerodayinitiative.com/advisories/ZDI-19-956/ - https://www.zerodayinitiative.com/advisories/ZDI-19-952/ - https://www.zerodayinitiative.com/advisories/ZDI-19-957/ - https://www.zerodayinitiative.com/advisories/ZDI-19-948/
CVE ID: CVE-2019-18230 State: PUBLISHED Published: 2019-10-31T21:15:32 Last Updated: 2024-08-05T01:47:14.024Z Vendors: n/a Products: Honeywell equIP & Performance series IP cameras Problem Types: CWE-306 Description: Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-304-03
CVE ID: CVE-2019-18231 State: PUBLISHED Published: 2021-03-17T18:12:07 Last Updated: 2024-08-05T01:47:14.006Z Vendors: n/a Products: Advantech Spectre RT ERT351 Problem Types: CWE-319 Description: Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03 - https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
CVE ID: CVE-2019-18232 State: PUBLISHED Published: 2019-12-11T22:22:42 Last Updated: 2024-08-05T01:47:14.069Z Vendors: n/a Products: SafeNet Sentinel LDK License Manager Runtime Problem Types: CWE-59 Description: SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system. Additional Ana
an attacker to execute a malicious DLL, which could impact the integrity and availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-339-01
CVE ID: CVE-2019-18233 State: PUBLISHED Published: 2021-03-17T18:08:39 Last Updated: 2024-08-05T01:47:14.102Z Vendors: n/a Products: Advantech Spectre RT Industrial Routers ERT351 Problem Types: CWE-79 Description: In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03 - https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
CVE ID: CVE-2019-18234 State: PUBLISHED Published: 2019-12-23T18:36:38 Last Updated: 2024-08-05T01:47:14.035Z Vendors: n/a Products: Equinox Control Expert Problem Types: CWE-89 Description: Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-353-02
CVE ID: CVE-2019-18235 State: PUBLISHED Published: 2021-03-17T18:13:47 Last Updated: 2024-08-05T01:47:14.074Z Vendors: n/a Products: Advantech Spectre RT ERT351 Versions 5.1.3 and prior Problem Types: CWE-307 Description: Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03 - https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
CVE ID: CVE-2019-18236 State: PUBLISHED Published: 2019-12-23T19:23:04 Last Updated: 2024-08-05T01:47:14.075Z Vendors: n/a Products: WECON PLC Editor Problem Types: CWE-121 Description: Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-353-03 - https://www.zerodayinitiative.com/advisories/ZDI-19-1033/ - https://www.zerodayinitiative.com/advisories/ZDI-19-1034/
CVE ID: CVE-2019-18238 State: PUBLISHED Published: 2020-02-26T21:19:56 Last Updated: 2024-08-05T01:47:14.071Z Vendors: n/a Products: Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower Problem Types: CWE-312 Description: In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-02
CVE ID: CVE-2019-18240 State: PUBLISHED Published: 2019-11-13T22:21:01 Last Updated: 2024-08-05T01:47:13.942Z Vendors: n/a Products: Fuji Electric V-Server 4.0.6 and prior Problem Types: CWE-122 Description: In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-311-02
CVE ID: CVE-2019-18241 State: PUBLISHED Published: 2019-11-25T23:25:05 Last Updated: 2024-08-05T01:47:14.050Z Vendors: n/a Products: Philips IntelliBridge EC40 and EC80 Problem Types: CWE-326 Description: In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-318-01
CVE ID: CVE-2019-18242 State: PUBLISHED Published: 2020-03-24T16:53:32 Last Updated: 2024-08-05T01:47:14.073Z Vendors: n/a Products: Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower Problem Types: CWE-941 Description: In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-02
CVE ID: CVE-2019-18243 State: PUBLISHED Published: 2021-02-18T15:02:34 Last Updated: 2024-08-05T01:47:14.029Z Vendors: n/a Products: HMI/SCADA iFIX Problem Types: CWE-732 Description: HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01
CVE ID: CVE-2019-18244 State: PUBLISHED Published: 2020-01-15T18:50:00 Last Updated: 2024-08-05T01:47:14.073Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-532 Description: In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2019-18245 State: PUBLISHED Published: 2019-12-11T22:17:46 Last Updated: 2024-08-05T01:47:14.163Z Vendors: n/a Products: Reliable Controls LicenseManager Problem Types: CWE-428 Description: Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow execution of code with elevated privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-337-01
CVE ID: CVE-2019-18246 State: PUBLISHED Published: 2020-06-29T13:58:20 Last Updated: 2024-08-05T01:47:14.007Z Vendors: n/a Products: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Problem Types: CWE-287 Description: BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE ID: CVE-2019-18247 State: PUBLISHED Published: 2019-11-27T22:03:01 Last Updated: 2024-08-05T01:47:14.105Z Vendors: n/a Products: Relion 650 and 670 Series Problem Types: CWE-20 Description: An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-330-02
CVE ID: CVE-2019-18248 State: PUBLISHED Published: 2020-06-29T13:58:22 Last Updated: 2024-08-05T01:47:14.159Z Vendors: n/a Products: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Problem Types: CWE-319 Description: BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE ID: CVE-2019-18249 State: PUBLISHED Published: 2019-12-24T14:39:35 Last Updated: 2024-08-05T01:47:14.106Z Vendors: n/a Products: Reliable Controls MACH-ProWebCom/Sys Problem Types: CWE-79 Description: Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands on behalf of the user when an authenticated user clicks on a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-353-04
CVE ID: CVE-2019-18250 State: PUBLISHED Published: 2019-11-25T23:13:29 Last Updated: 2024-08-05T01:47:14.143Z Vendors: n/a Products: ABB Power Generation Information Manager (PGIM) and Plant Connect All Versions Problem Types: CWE-288 Description: In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-318-05
CVE ID: CVE-2019-18251 State: PUBLISHED Published: 2019-11-25T23:29:02 Last Updated: 2024-08-05T01:47:14.083Z Vendors: n/a Products: Omron CX-Supervisor Problem Types: CWE-477 Description: In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-318-04 - https://www.zerodayinitiative.com/advisories/ZDI-19-997/
CVE ID: CVE-2019-18252 State: PUBLISHED Published: 2020-06-29T13:58:25 Last Updated: 2024-08-05T01:47:14.154Z Vendors: n/a Products: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Problem Types: CWE-287 Description: BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE ID: CVE-2019-18253 State: PUBLISHED Published: 2019-11-27T22:05:47 Last Updated: 2024-08-05T01:47:14.144Z Vendors: n/a Products: Relion 670 Series Problem Types: CWE-22 Description: An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-330-01
CVE ID: CVE-2019-18254 State: PUBLISHED Published: 2020-06-29T13:56:26 Last Updated: 2024-08-05T01:47:14.141Z Vendors: n/a Products: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Problem Types: CWE-311 Description: BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE ID: CVE-2019-18255 State: PUBLISHED Published: 2021-02-18T15:00:54 Last Updated: 2024-08-05T01:47:14.142Z Vendors: n/a Products: HMI/SCADA iFIX Problem Types: CWE-732 Description: HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01
CVE ID: CVE-2019-18256 State: PUBLISHED Published: 2020-06-29T13:56:28 Last Updated: 2024-08-05T01:47:14.076Z Vendors: n/a Products: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Problem Types: CWE-257 Description: BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE ID: CVE-2019-18257 State: PUBLISHED Published: 2019-12-17T22:28:49 Last Updated: 2024-08-05T01:47:14.157Z Vendors: n/a Products: Advantech DiagAnywhere Server Problem Types: CWE-121 Description: In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfer service listening on the TCP port. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code with the privileges of the user running DiagAnywhere Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-346-01
CVE ID: CVE-2019-18259 State: PUBLISHED Published: 2019-12-16T19:19:04 Last Updated: 2024-08-05T01:47:14.082Z Vendors: n/a Products: Omron PLC CJ and CS Series Problem Types: CWE-290 Description: In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-346-02
CVE ID: CVE-2019-18261 State: PUBLISHED Published: 2019-12-16T19:27:58 Last Updated: 2024-08-05T01:47:14.092Z Vendors: n/a Products: Omron PLC CJ, CS and NJ Series Problem Types: CWE-307 Description: In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-346-03