Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-49619 State: PUBLISHED Published: 2024-01-10T08:25:01.610Z Last Updated: 2025-06-11T17:00:45.974Z Vendors: Apache Software Foundation Products: Apache Answer Problem Types: CWE-362 Description: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarked once. However, repeat submissions through the script can increase the number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the
e number of collection of the question many times. Users are recommended to upgrade to version [1.2.1], which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/nscrl3c7pn68q4j73y3ottql6n5x3hd4 - http://www.openwall.com/lists/oss-security/2024/01/10/1
CVE ID: CVE-2023-49620 State: PUBLISHED Published: 2023-11-30T08:17:01.765Z Last Updated: 2025-02-13T17:18:46.703Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-862 Description: Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (which almost used in sql task), with unauthorized access vulnerability (IDOR), but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires user login to operate, please upgrade to version 3.1.0 to avoid this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/dol
avoid this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/dolphinscheduler/pull/10307 - https://lists.apache.org/thread/zm4t1ykj4cro1c8183q7y32z0yzfz8yj - http://www.openwall.com/lists/oss-security/2023/11/30/4
CVE ID: CVE-2023-49621 State: PUBLISHED Published: 2024-01-09T10:00:11.770Z Last Updated: 2025-06-17T20:39:17.414Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC CN 4100 Problem Types: CWE-1392 Description: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productce
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-777015.pdf
CVE ID: CVE-2023-49622 State: PUBLISHED Published: 2024-01-04T13:50:27.318Z Last Updated: 2025-06-17T20:29:09.430Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the material_bill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara
Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49624 State: PUBLISHED Published: 2024-01-04T13:51:28.166Z Last Updated: 2025-06-17T20:29:09.631Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_bill.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49625 State: PUBLISHED Published: 2024-01-04T13:52:28.723Z Last Updated: 2025-06-17T20:29:09.786Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submit.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49633 State: PUBLISHED Published: 2024-01-04T13:53:59.309Z Last Updated: 2025-06-17T20:29:09.908Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' parameter of the buyer_detail_submit.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49639 State: PUBLISHED Published: 2024-01-04T13:57:12.848Z Last Updated: 2025-06-17T20:29:10.034Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' parameter of the buyer_invoice_submit.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49641 State: PUBLISHED Published: 2025-05-12T23:34:40.193Z Last Updated: 2025-05-13T14:07:46.752Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49646 State: PUBLISHED Published: 2023-12-13T22:19:26.963Z Last Updated: 2024-09-20T14:53:41.733Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-347 Description: Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/
CVE ID: CVE-2023-49647 State: PUBLISHED Published: 2024-01-12T21:44:00.743Z Last Updated: 2025-06-03T14:03:40.061Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 Problem Types: CWE-266 Description: Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
f privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24001/
CVE ID: CVE-2023-49652 State: PUBLISHED Published: 2023-11-29T13:45:09.576Z Last Updated: 2024-08-02T22:01:25.605Z Vendors: Jenkins Project Products: Jenkins Google Compute Engine Plugin Description: Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate system-scoped credentials IDs of credentials stored in Jenkins and to connect to Google Cloud Platform using attacker-specified credentials IDs obtained through another method, to obtain information about existing projects. This fix has been backported to 4.3.17.1.
tained through another method, to obtain information about existing projects. This fix has been backported to 4.3.17.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-2835 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49653 State: PUBLISHED Published: 2023-11-29T13:45:10.268Z Last Updated: 2025-02-13T17:18:47.248Z Vendors: Jenkins Project Products: Jenkins Jira Plugin Description: Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3225 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49654 State: PUBLISHED Published: 2023-11-29T13:45:10.938Z Last Updated: 2025-02-13T17:18:47.815Z Vendors: Jenkins Project Products: Jenkins MATLAB Plugin Description: Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49655 State: PUBLISHED Published: 2023-11-29T13:45:11.577Z Last Updated: 2025-02-13T17:18:48.409Z Vendors: Jenkins Project Products: Jenkins MATLAB Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49656 State: PUBLISHED Published: 2023-11-29T13:45:12.215Z Last Updated: 2025-02-13T17:18:49.036Z Vendors: Jenkins Project Products: Jenkins MATLAB Plugin Description: Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49657 State: PUBLISHED Published: 2024-01-23T15:06:59.901Z Last Updated: 2025-06-17T21:19:26.476Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with create/update permissions on charts or dashboards could store a script or add a specific HTML snippet that would act as a stored XSS. For 2.X versions, users should change their config to include: TALISMAN_CONFIG = { "content_security_policy": { "base-uri": ["'self'"], "default-src": ["'self
their config to include: TALISMAN_CONFIG = { "content_security_policy": { "base-uri": ["'self'"], "default-src": ["'self'"], "img-src": ["'self'", "blob:", "data:"], "worker-src": ["'self'", "blob:"], "connect-src": [ "'self'", " https://api.mapbox.com" https://api.mapbox.com" ;, " https://events.mapbox.com" https://events.mapbox.com" ;, ], "object-src": "'none'", "style-src": [ "'self'", "'unsafe-inline'", ], "script-src": ["'self'", "'strict-dynamic'"], }, "content_security_policy_nonce_in": ["script-src"], "force_https": False, "session_cookie_secure": False, } Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/wjyvz8o
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/wjyvz8om9nwd396lh0bt156mtwjxpsvx
CVE ID: CVE-2023-49658 State: PUBLISHED Published: 2024-01-04T14:00:11.438Z Last Updated: 2025-06-17T20:29:10.172Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parameter of the party_submit.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49665 State: PUBLISHED Published: 2024-01-04T14:01:23.657Z Last Updated: 2025-06-17T20:29:10.314Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' parameter of the submit_delivery_list.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49666 State: PUBLISHED Published: 2024-01-04T14:02:16.288Z Last Updated: 2025-06-17T20:29:10.446Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Billing Software Problem Types: CWE-89 Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' parameter of the submit_material_list.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/zimerman/ - https://www.kashipara.com/
CVE ID: CVE-2023-49673 State: PUBLISHED Published: 2023-11-29T13:45:12.847Z Last Updated: 2025-06-05T13:41:19.600Z Vendors: Jenkins Project Products: Jenkins NeuVector Vulnerability Scanner Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3256 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49674 State: PUBLISHED Published: 2023-11-29T13:45:13.482Z Last Updated: 2025-02-13T17:18:50.694Z Vendors: Jenkins Project Products: Jenkins NeuVector Vulnerability Scanner Plugin Description: A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3256 - http://www.openwall.com/lists/oss-security/2023/11/29/1
CVE ID: CVE-2023-49675 State: PUBLISHED Published: 2024-05-06T11:09:17.526Z Last Updated: 2024-08-02T22:01:25.850Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Development System V2.3 Problem Types: CWE-787 Description: An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-024
CVE ID: CVE-2023-49676 State: PUBLISHED Published: 2024-05-06T11:09:34.442Z Last Updated: 2024-08-02T22:01:25.611Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Development System V2.3 Problem Types: CWE-416 Description: An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-024
CVE ID: CVE-2023-49677 State: PUBLISHED Published: 2023-12-21T22:57:02.575Z Last Updated: 2024-08-02T22:01:26.016Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Job Portal Problem Types: CWE-89 Description: Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the Employer/InsertJob.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/pollini/ - https://www.kashipara.com/
CVE ID: CVE-2023-49678 State: REJECTED Published: 2023-12-21T22:59:09.539Z Last Updated: 2024-01-02T19:52:25.846Z Description: No description available.
CVE ID: CVE-2023-49679 State: REJECTED Published: 2023-12-21T22:59:46.244Z Last Updated: 2024-01-02T19:54:11.087Z Description: No description available.
CVE ID: CVE-2023-49680 State: REJECTED Published: 2023-12-21T23:02:30.114Z Last Updated: 2024-01-02T19:54:55.180Z Description: No description available.
CVE ID: CVE-2023-49681 State: PUBLISHED Published: 2023-12-21T23:06:19.930Z Last Updated: 2024-09-12T19:52:13.964Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Job Portal Problem Types: CWE-89 Description: Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the Employer/InsertWalkin.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/pollini/ - https://www.kashipara.com/
CVE ID: CVE-2023-49682 State: REJECTED Published: 2023-12-21T23:07:19.614Z Last Updated: 2024-01-02T19:55:40.139Z Description: No description available.
CVE ID: CVE-2023-49683 State: REJECTED Published: 2023-12-21T23:08:32.403Z Last Updated: 2024-01-02T19:56:23.630Z Description: No description available.
CVE ID: CVE-2023-49684 State: REJECTED Published: 2023-12-21T23:12:28.842Z Last Updated: 2024-01-02T19:57:18.347Z Description: No description available.
CVE ID: CVE-2023-49685 State: REJECTED Published: 2023-12-21T23:13:07.408Z Last Updated: 2024-01-02T19:58:02.036Z Description: No description available.
CVE ID: CVE-2023-49686 State: REJECTED Published: 2023-12-21T23:19:11.704Z Last Updated: 2024-01-02T19:58:44.925Z Description: No description available.
CVE ID: CVE-2023-49687 State: REJECTED Published: 2023-12-21T23:20:14.194Z Last Updated: 2024-01-02T19:59:58.279Z Description: No description available.
CVE ID: CVE-2023-49688 State: PUBLISHED Published: 2023-12-21T23:21:04.511Z Last Updated: 2024-09-12T19:50:52.525Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Job Portal Problem Types: CWE-89 Description: Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/pollini/ - https://www.kashipara.com/
CVE ID: CVE-2023-49689 State: PUBLISHED Published: 2023-12-21T23:26:34.521Z Last Updated: 2024-08-02T22:01:25.695Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kashipara Group Products: Job Portal Problem Types: CWE-89 Description: Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'JobId' parameter of the Employer/DeleteJob.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/pollini/ - https://www.kashipara.com/
CVE ID: CVE-2023-49690 State: REJECTED Published: 2023-12-21T23:27:14.054Z Last Updated: 2024-01-02T20:00:48.830Z Description: No description available.
CVE ID: CVE-2023-49691 State: PUBLISHED Published: 2023-12-12T11:27:24.588Z Last Updated: 2024-08-13T07:53:58.093Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL-Router, SCALANCE M816-1 ADSL-Router, SCALANCE M826-2 SHDSL-Router, SCALANCE M874-2, SCALANCE M874-3, SCALANCE M876-3, SCALANCE M876-3 (ROK), SCALANCE M876-4, SCALANCE M876-4 (EU), SCALANCE M876-4 (NAM), SCALANCE MUM853-1 (EU), SCALANCE MUM856-1 (EU), SCALANCE MUM856-1 (RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router Problem Types: CWE-78 Description: A vulnerab
NCE MUM856-1 (RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router Problem Types: CWE-78 Description: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.0), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All ver
816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.0), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.0), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.0), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.0), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.0), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.0), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.0), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.0), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.0), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.0), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V