Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10596 State: PUBLISHED Published: 2020-03-17T14:42:30 Last Updated: 2024-08-04T11:06:09.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencart/opencart/issues/7810 - http://packetstormsecurity.com/files/157908/OpenCart-3.0.3.2-Cross-Site-Scripting.html
CVE ID: CVE-2020-10597 State: PUBLISHED Published: 2020-03-20T14:27:16 Last Updated: 2024-08-04T11:06:10.167Z Vendors: n/a Products: Delta Industrial Automation DOPSoft Problem Types: CWE-125 Description: Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-182-01
CVE ID: CVE-2020-10598 State: PUBLISHED Published: 2020-04-01T20:59:36 Last Updated: 2024-08-04T11:06:10.174Z Vendors: Becton, Dickinson and Company (BD) Products: Pyxis MedStation ES System, Pyxis Anesthesia (PAS) ES System Problem Types: CWE-693 Description: In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-091-
a. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-091-01
CVE ID: CVE-2020-10599 State: PUBLISHED Published: 2020-04-03T17:51:39 Last Updated: 2024-08-04T11:06:10.208Z Vendors: VISAM Products: VBASE Editor, VBASE Web-Remote Module Problem Types: CWE-121 Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE ID: CVE-2020-10600 State: PUBLISHED Published: 2020-07-24T23:01:05.997100Z Last Updated: 2024-09-16T19:20:28.875Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: OSIsoft Products: PI Data Archive Problem Types: CWE-476 Description: An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10601 State: PUBLISHED Published: 2020-04-03T17:44:30 Last Updated: 2024-08-04T11:06:09.972Z Vendors: VISAM Products: VBASE Editor, VBASE Web-Remote Module Problem Types: CWE-326 Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE ID: CVE-2020-10602 State: PUBLISHED Published: 2020-07-24T22:58:44 Last Updated: 2024-08-04T11:06:10.172Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-476 Description: In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10603 State: PUBLISHED Published: 2020-04-09T13:10:53 Last Updated: 2024-08-04T11:06:10.057Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-78 Description: WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10604 State: PUBLISHED Published: 2020-07-24T23:34:55 Last Updated: 2024-08-04T11:06:09.997Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-248 Description: In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10605 State: PUBLISHED Published: 2020-07-17T21:55:36.534259Z Last Updated: 2024-09-17T02:51:29.016Z Vendors: Grundfos Products: CIM 500 Problem Types: CWE-306 Description: Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-189-01
CVE ID: CVE-2020-10606 State: PUBLISHED Published: 2020-07-24T22:55:32 Last Updated: 2024-08-04T11:06:10.081Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-276 Description: In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20
oyment. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10607 State: PUBLISHED Published: 2020-03-27T13:27:24 Last Updated: 2024-08-04T11:06:10.090Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-121 Description: In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the length of user-supplied data may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-086-01
CVE ID: CVE-2020-10608 State: PUBLISHED Published: 2020-07-24T22:46:02 Last Updated: 2024-08-04T11:06:09.916Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-347 Description: In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10609 State: PUBLISHED Published: 2020-07-27T18:57:42.479035Z Last Updated: 2024-09-17T00:02:05.521Z Vendors: Grundfos Products: CIM 500 Problem Types: CWE-256 Description: Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-189-01
CVE ID: CVE-2020-10610 State: PUBLISHED Published: 2020-07-24T22:42:39 Last Updated: 2024-08-04T11:06:10.091Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-427 Description: In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10611 State: PUBLISHED Published: 2020-04-15T18:36:16 Last Updated: 2024-08-04T11:06:10.007Z Vendors: n/a Products: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 Problem Types: CWE-843 Description: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets. Additional Analyst Notes: - CVE Program Container: References: - https:/
plicable to installations using DNP3 Data Sets. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-105-03 - https://www.zerodayinitiative.com/advisories/ZDI-20-549/
CVE ID: CVE-2020-10612 State: PUBLISHED Published: 2020-05-14T20:33:57 Last Updated: 2024-08-04T11:06:09.904Z Vendors: n/a Products: Opto 22 SoftPAC Project Problem Types: CWE-284 Description: Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting or stopping service, or writing to certain registry values. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-135-01
CVE ID: CVE-2020-10613 State: PUBLISHED Published: 2020-04-15T18:30:42 Last Updated: 2024-08-04T11:06:10.142Z Vendors: n/a Products: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 Problem Types: CWE-125 Description: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets. Additional Analyst Notes: - CVE Program Conta
this vulnerability. Only applicable to installations using DNP3 Data Sets. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-105-03 - https://www.zerodayinitiative.com/advisories/ZDI-20-548/
CVE ID: CVE-2020-10614 State: PUBLISHED Published: 2020-07-24T23:43:05 Last Updated: 2024-08-04T11:06:10.183Z Vendors: n/a Products: OSIsoft PI System multiple products and versions Problem Types: CWE-79 Description: In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE ID: CVE-2020-10615 State: PUBLISHED Published: 2020-04-15T18:28:01 Last Updated: 2024-08-04T11:06:10.164Z Vendors: n/a Products: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 Problem Types: CWE-121 Description: Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the length of user-supplied data, prior to copying it to a fixed-length stack-based buffer. Authentication is not required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/ad
loit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-105-03 - https://www.zerodayinitiative.com/advisories/ZDI-20-547/
CVE ID: CVE-2020-10616 State: PUBLISHED Published: 2020-05-14T20:36:36 Last Updated: 2024-08-04T11:06:10.160Z Vendors: n/a Products: Opto 22 SoftPAC Project Problem Types: CWE-427 Description: Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-135-01
CVE ID: CVE-2020-10617 State: PUBLISHED Published: 2020-04-09T13:05:12 Last Updated: 2024-08-04T11:06:10.158Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-89 Description: There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10618 State: PUBLISHED Published: 2020-05-04T18:24:38 Last Updated: 2024-08-04T11:06:10.194Z Vendors: n/a Products: LCDS LAquis SCADA Versions 4.3.1 and prior Problem Types: CWE-200 Description: LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-119-01
CVE ID: CVE-2020-10619 State: PUBLISHED Published: 2020-04-09T13:13:42 Last Updated: 2024-08-04T11:06:10.123Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-23 Description: An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10620 State: PUBLISHED Published: 2020-05-14T20:39:13 Last Updated: 2024-08-04T11:06:10.179Z Vendors: n/a Products: Opto 22 SoftPAC Project Problem Types: CWE-285 Description: Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-135-01
CVE ID: CVE-2020-10621 State: PUBLISHED Published: 2020-04-09T13:01:26 Last Updated: 2024-08-04T11:06:10.185Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-434 Description: Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2). Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10622 State: PUBLISHED Published: 2020-05-04T18:26:04 Last Updated: 2024-08-04T11:06:10.160Z Vendors: n/a Products: LCDS LAquis SCADA Versions 4.3.1 and prior Problem Types: CWE-20 Description: LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-119-01
CVE ID: CVE-2020-10623 State: PUBLISHED Published: 2020-04-09T13:03:30 Last Updated: 2024-08-04T11:06:10.178Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-89 Description: Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10624 State: PUBLISHED Published: 2020-06-26T16:22:46 Last Updated: 2024-08-04T11:06:10.188Z Vendors: n/a Products: ControlEdge PLC, ControlEdge RTU Problem Types: CWE-319 Description: ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-175-02
CVE ID: CVE-2020-10625 State: PUBLISHED Published: 2020-04-09T13:06:59 Last Updated: 2024-08-04T11:06:10.164Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-306 Description: WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10626 State: PUBLISHED Published: 2020-05-14T15:52:13 Last Updated: 2024-08-04T11:06:10.152Z Vendors: n/a Products: Fazecast jSerialComm, Version 2.2.2 and prior Problem Types: CWE-427 Description: In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ICSA2012601
CVE ID: CVE-2020-10627 State: PUBLISHED Published: 2021-12-01T15:38:31 Last Updated: 2024-08-04T11:06:10.161Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Insulet Products: Omnipod Insulin Management System Problem Types: CWE-284 Description: Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerabilit
er with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01 - https://www.myomnipod.com/security-bulletins
CVE ID: CVE-2020-10628 State: PUBLISHED Published: 2020-06-26T16:06:26 Last Updated: 2024-08-04T11:06:10.169Z Vendors: n/a Products: ControlEdge PLC, ControlEdge RTU Problem Types: CWE-319 Description: ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-175-02
CVE ID: CVE-2020-10629 State: PUBLISHED Published: 2020-04-09T13:12:17 Last Updated: 2024-08-04T11:06:10.190Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-611 Description: WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10630 State: PUBLISHED Published: 2020-05-05T20:08:18 Last Updated: 2024-08-04T11:06:10.157Z Vendors: n/a Products: SAE IT-systems FW-50 Remote Telemetry Unit (RTU) Problem Types: CWE-79 Description: SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ICSA2012602
CVE ID: CVE-2020-10631 State: PUBLISHED Published: 2020-04-09T13:08:55 Last Updated: 2024-08-04T11:06:10.432Z Vendors: n/a Products: WebAccess/NMS Problem Types: CWE-23 Description: An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-01
CVE ID: CVE-2020-10632 State: PUBLISHED Published: 2022-02-24T18:50:14.000Z Last Updated: 2025-04-16T18:01:14.956Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Emerson Products: OpenEnterprise SCADA Software Problem Types: CWE-282 Description: Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02
CVE ID: CVE-2020-10633 State: PUBLISHED Published: 2020-04-08T00:03:25 Last Updated: 2024-08-04T11:06:10.447Z Vendors: n/a Products: eWON Flexy and Cosy Problem Types: CWE-79 Description: A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). An attacker could send a specially crafted URL to initiate a password change for the device. The target must introduce the credentials to the gateway before the attack can be successful. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-098-03
CVE ID: CVE-2020-10634 State: PUBLISHED Published: 2020-05-05T20:10:07 Last Updated: 2024-08-04T11:06:10.447Z Vendors: n/a Products: SAE IT-systems FW-50 Remote Telemetry Unit (RTU) Problem Types: CWE-22 Description: SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ICSA2012602
CVE ID: CVE-2020-10635 State: PUBLISHED Published: 2022-02-24T18:27:18.000Z Last Updated: 2025-04-16T16:44:29.662Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: KUKA Products: Sim Pro Problem Types: CWE-924 Description: Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a model, the server transmits the model in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-098-05
CVE ID: CVE-2020-10636 State: PUBLISHED Published: 2022-02-24T18:50:16.000Z Last Updated: 2025-04-16T16:44:11.037Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Emerson Products: OpenEnterprise SCADA Software Problem Types: CWE-326 Description: Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02