Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23119 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T18:57:53.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SkYce4f5o - https://community.ui.com/tags/security
lnrichment: References: - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SkYce4f5o - https://community.ui.com/tags/security/releases
CVE ID: CVE-2023-23120 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T18:57:03.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trendnet.com/support/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJl1o
SA ADP Vulnrichment: References: - https://www.trendnet.com/support/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJl1oFzci
CVE ID: CVE-2023-23126 State: PUBLISHED Published: 2023-02-01T00:00:00 Last Updated: 2024-08-02T10:28:40.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintended actions. NOTE: the vendor's position is that a Content-Security-Policy HTTP response header is present to block this attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/l00neyhacker/CVE-2023-23126
CVE ID: CVE-2023-23127 State: PUBLISHED Published: 2023-02-01T00:00:00 Last Updated: 2024-08-02T10:28:39.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS. NOTE: the vendor's position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/l00neyhacker/CVE-2023-23127
CVE ID: CVE-2023-23128 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:24:45.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2023-23128
CVE ID: CVE-2023-23130 State: PUBLISHED Published: 2023-02-01T00:00:00 Last Updated: 2024-08-02T10:28:39.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled. OTE: the vendor's position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/l00neyhacker/CVE-2023-23130
CVE ID: CVE-2023-23131 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:23:11.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2023-23131
CVE ID: CVE-2023-23132 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:21:32.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2023-23132
CVE ID: CVE-2023-23135 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:20:11.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/litanhua-fost9/hu05qa/fdmgbrzlvq9qpg3a?singleDoc
CVE ID: CVE-2023-23136 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:18:59.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/litanhua-fost9/hu05qa/izexczwp01w5c68i?singleDoc
CVE ID: CVE-2023-23143 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T14:50:28.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/commit/af6a5e7a96ee01a139cce6c9e4edfc069aad17a6 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-23144 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T14:48:52.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/commit/3a2458a49b3e6399709d456d7b35e7a6f50cfb86 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-23145 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T14:46:55.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/commit/4ade98128cbc41d5115b97a41ca2e59529c8dd5f - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-23149 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-20T19:58:06.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/5430dc75683c642b7dc09e61c21a4ef4
CVE ID: CVE-2023-23150 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:17:27.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://reference14.example.com - https://gist.github.com/yinfei6/f7099835e9abbe16a29744430ea76a37#file-cve-2023-23150
CVE ID: CVE-2023-23151 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-03-28T14:58:57.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alexlang24/bloofoxCMS/issues/17
CVE ID: CVE-2023-23155 State: PUBLISHED Published: 2023-02-27T00:00:00 Last Updated: 2024-08-02T10:28:40.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620
CVE ID: CVE-2023-23156 State: PUBLISHED Published: 2023-02-27T00:00:00 Last Updated: 2024-08-02T10:28:40.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620
CVE ID: CVE-2023-23157 State: PUBLISHED Published: 2023-02-27T00:00:00 Last Updated: 2024-08-02T10:28:40.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23157/CVE-2023-23157.txt
CVE ID: CVE-2023-23158 State: PUBLISHED Published: 2023-02-27T00:00:00 Last Updated: 2024-08-02T10:28:40.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23158/CVE-2023-23158.txt
CVE ID: CVE-2023-23161 State: PUBLISHED Published: 2023-02-10T00:00:00 Last Updated: 2024-08-02T10:28:40.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-231
llery-management-system-using-php-and-mysql/ - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txt - http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-23162 State: PUBLISHED Published: 2023-02-10T00:00:00 Last Updated: 2024-08-02T10:28:40.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23162/CVE-2023-23162.txt - http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html
CVE ID: CVE-2023-23163 State: PUBLISHED Published: 2023-02-10T00:00:00 Last Updated: 2024-11-27T14:59:03.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip - https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/ - https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23163/CVE-2023-23163.txt - http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.h
E-2023-23163.txt - http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html
CVE ID: CVE-2023-23169 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-27T16:28:50.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://support.synapsoft.co.kr:50000/skin/try_pdfocus/index.html - https://github.com/S4nshine/CVE-2023-23169
CVE ID: CVE-2023-23192 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:30:46.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.isdecisions.com/products/userlock/ - https://github.com/pinarsadioglu/CVE-2023-23192/
CVE ID: CVE-2023-23205 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:18:47.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mz-automation/lib60870/issues/132
CVE ID: CVE-2023-23208 State: PUBLISHED Published: 2023-08-13T00:00:00 Last Updated: 2024-10-10T14:51:27.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-11261. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.genesys.com/Documentation/RN/9.0.x/gax90rn/gax9010515
CVE ID: CVE-2023-23277 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:54:00.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snippet-box 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pawelmalak/snippet-box - https://github.com/pawelmalak/snippet-box/issues/57 - https://github.com/go-compile/security-advisories/blob/master/CVE-2023-23277.pdf
CVE ID: CVE-2023-23279 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:49:57.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/mG658E9iSW6TkbS8xAuUNg
CVE ID: CVE-2023-23286 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:21:27.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via username field from the login form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.provideserver.se/ - https://f20.be/cves/provide-server-v-14-4 - http://packetstormsecurity.com/files/171734/Provide-Server-14.4-XSS-Cross-Site-Request-Forgery-Code-Execution.html
CVE ID: CVE-2023-23294 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:29:59.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/
CVE ID: CVE-2023-23295 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-17T18:30:19.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/
CVE ID: CVE-2023-23296 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-17T18:30:48.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/
CVE ID: CVE-2023-23298 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T15:01:03.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters and hijack the execution of the device's firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/compatible-devices/ - https://developer.garmin.com
P Vulnrichment: References: - https://developer.garmin.com/connect-iq/compatible-devices/ - https://developer.garmin.com/connect-iq/api-docs/Toybox/Graphics/BufferedBitmap.html#initialize-instance_function - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23298.md
CVE ID: CVE-2023-23299 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T14:58:47.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data such as user profile information and GPS coordinates, among others. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/core-topics/manifest-and-permission
iner: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/core-topics/manifest-and-permissions/ - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23299.md
CVE ID: CVE-2023-23300 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T14:54:57.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted parameters and hijack the execution of the device's firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/api-docs/Toybox/Cryptography/Cipher.html#initialize-instance_function - https://gi
tps://developer.garmin.com/connect-iq/api-docs/Toybox/Cryptography/Cipher.html#initialize-instance_function - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23300.md
CVE ID: CVE-2023-23301 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T14:50:39.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and whose length extends past its end. Upon loading the string, the GarminOS TVM component may read out-of-bounds memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main
ogram Container: - CISA ADP Vulnrichment: References: - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23301.md
CVE ID: CVE-2023-23302 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T14:49:08.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the execution of the device's firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/api-docs/Toybox/Ant/GenericChannel.html#setDeviceConfig-instance_function
ces: - https://developer.garmin.com/connect-iq/api-docs/Toybox/Ant/GenericChannel.html#setDeviceConfig-instance_function - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23302.md
CVE ID: CVE-2023-23303 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T14:47:35.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the execution of the device's firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.garmin.com/connect-iq/api-docs/Toybox/Ant/GenericChannel.html#enableEncryption-instance_fu
ferences: - https://developer.garmin.com/connect-iq/api-docs/Toybox/Ant/GenericChannel.html#enableEncryption-instance_function - https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23303.md