Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34462 State: PUBLISHED Published: 2023-06-22T23:00:12.104Z Last Updated: 2025-02-13T16:55:36.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: netty Products: netty Problem Types: CWE-400 Description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the
ake a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
version 4.1.94.Final. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845 - https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32 - https://security.netapp.com/advisory/ntap-20230803-0001/ - https://www.debian.org/security/2023/dsa-5558 - https://security.netapp.com/advisory/ntap-20240621-0007/
CVE ID: CVE-2023-34463 State: PUBLISHED Published: 2023-06-26T20:29:38.074Z Last Updated: 2024-11-06T17:25:21.137Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: dataease Products: dataease Problem Types: CWE-862 Description: DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized users can delete an application erroneously. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/
erability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-4c4p-qfwq-85fj
CVE ID: CVE-2023-34464 State: PUBLISHED Published: 2023-06-23T14:44:47.064Z Last Updated: 2024-12-05T16:04:28.946Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-79 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.2.1 until versions 14.4.8, 14.10.5, and 15.1RC1 of org.xwiki.platform:xwiki-platform-web and any version prior to 14.4.8, 14.10.5, and 15.1.RC1 of org.xwiki.platform:xwiki-platform-web-templates, any user who can edit a document in a wiki like the user profile can create a stored cross-site scripting attack
plates, any user who can edit a document in a wiki like the user profile can create a stored cross-site scripting attack. The attack occurs by putting plain HTML code into that document and then tricking another user to visit that document with the `displaycontent` or `rendercontent` template and plain output syntax. If a user with programming rights is tricked into visiting such a URL, arbitrary actions be performed with this user's rights, impacting the confidentiality, integrity, and availability of the whole XWiki installation. This has been patched in XWiki 14.4.8, 14.10.5 and 15.1RC1 by setting the content type of the response to plain text when the output syntax is not an HTML syntax.
10.5 and 15.1RC1 by setting the content type of the response to plain text when the output syntax is not an HTML syntax. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp7h-f9f5-x4q7 - https://github.com/xwiki/xwiki-platform/commit/53e8292a31ec70fba5e1d705a4ac443658b9e6df - https://jira.xwiki.org/browse/XWIKI-20290
CVE ID: CVE-2023-34465 State: PUBLISHED Published: 2023-06-23T15:07:59.732Z Last Updated: 2024-11-29T14:38:11.552Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-269 Description: XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and view and edit the mail sending configuration, including the smtp domain name and credentials. The problem has been patched in XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, th
e smtp domain name and credentials. The problem has been patched in XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, the rights of the `Mail.MailConfig` page can be manually updated so that only a set of trusted users can view, edit and delete it (e.g., the `XWiki.XWikiAdminGroup` group). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-g75c-cjr6-39mc - https://github.com/xwiki/xwiki-platform/commit/8910b8857d3442d2e8142f655fdc0512930354d1 - https://github.com/xwiki/xwiki-platform/commit/d28d7739089e1ae8961257d9da7135d1a01cb7d4 - https://jira.xwiki.org/browse/XWIKI-20519 - https://jira.
iki-platform/commit/d28d7739089e1ae8961257d9da7135d1a01cb7d4 - https://jira.xwiki.org/browse/XWIKI-20519 - https://jira.xwiki.org/browse/XWIKI-20671
CVE ID: CVE-2023-34466 State: PUBLISHED Published: 2023-06-23T15:26:11.453Z Last Updated: 2024-11-29T14:36:27.432Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-200 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.0-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, tags from pages not viewable to the current user are leaked by the tags API. This information can also be exploited to infer the document reference of non-viewable pages. This vulnerability has been patched in XWiki 14.4.8, 14.10.4, and 15.0
fer the document reference of non-viewable pages. This vulnerability has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7f2f-pcv3-j2r7 - https://jira.xwiki.org/browse/XWIKI-20002
CVE ID: CVE-2023-34467 State: PUBLISHED Published: 2023-06-23T16:20:51.164Z Last Updated: 2024-11-29T14:35:59.084Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-402 Description: XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, the rest response was also containing the mail unobfuscated and users were able to filter and sort on the unobfuscated, allowing them to infer the mail content. The consequence wa
and users were able to filter and sort on the unobfuscated, allowing them to infer the mail content. The consequence was the possibility to retrieve the email addresses of all users even when obfuscated. This has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7vr7-cghh-ch63 - https://github.com/xwiki/xwiki-platform/commit/71f889db9962df2d385f4298e29cfbc9050b828a#diff-5a739e5865b1f1ad9d79b724791be51b0095a0170cc078911c940478b13b949a - https://jira.xwiki.org/browse/XWIKI-20333
CVE ID: CVE-2023-34468 State: PUBLISHED Published: 2023-06-12T15:09:20.711Z Last Updated: 2025-02-13T16:55:36.706Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: CWE-94 Description: The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The resolution validates the Database URL and rejects H2 JDBC locations. You are recommended to upgrade to version 1.22.0 or later which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nifi.ap
es this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nifi.apache.org/security.html#CVE-2023-34468 - https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8 - http://www.openwall.com/lists/oss-security/2023/06/12/3 - http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Remote-Code-Execution.html - https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-analysis-and-exploitation/
CVE ID: CVE-2023-34469 State: PUBLISHED Published: 2023-09-12T15:21:11.450Z Last Updated: 2024-09-24T20:36:07.365Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: AMI Products: AptioV Problem Types: CWE-284 Description: AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023007.pdf
CVE ID: CVE-2023-34470 State: PUBLISHED Published: 2023-09-12T15:21:58.331Z Last Updated: 2024-09-26T13:43:02.938Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: AMI Products: AptioV Problem Types: CWE-284 Description: AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023007.pdf
CVE ID: CVE-2023-34471 State: PUBLISHED Published: 2023-07-05T18:05:43.341Z Last Updated: 2024-11-21T14:53:57.955Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: AMI Products: MegaRAC_SPx Problem Types: CWE-325 Description: AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisori
- CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
CVE ID: CVE-2023-34472 State: PUBLISHED Published: 2023-07-05T18:08:16.990Z Last Updated: 2024-10-28T17:43:14.920Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: AMI Products: MegaRAC_SPx Problem Types: CWE-113, CWE-93 Description: AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
CVE ID: CVE-2023-34473 State: PUBLISHED Published: 2023-07-05T18:10:11.083Z Last Updated: 2024-11-21T14:51:32.223Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: AMI Products: MegaRAC_SPx Problem Types: CWE-798 Description: AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
CVE ID: CVE-2023-34474 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-08-02T16:10:07.299Z Vendors: n/a Products: ImageMagick Problem Types: CWE-122 Description: A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0 - https://bugzilla.redhat.com/show_bug.cgi?
.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0 - https://bugzilla.redhat.com/show_bug.cgi?id=2214148 - https://access.redhat.com/security/cve/CVE-2023-34474 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
CVE ID: CVE-2023-34475 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-03T16:25:39.867Z Vendors: n/a Products: ImageMagick Problem Types: CWE-416 Description: A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0 - https://bugzilla.redhat.com/show_bu
github.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0 - https://bugzilla.redhat.com/show_bug.cgi?id=2214149 - https://access.redhat.com/security/cve/CVE-2023-34475 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
CVE ID: CVE-2023-34476 State: PUBLISHED Published: 2023-08-07T16:50:58.020Z Last Updated: 2024-10-20T04:33:17.046Z Vendors: mooj.org Products: Proforms Basic component for Joomla Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extensions.joomla.org/extension/proforms-basic/
CVE ID: CVE-2023-34477 State: PUBLISHED Published: 2023-08-07T16:50:55.613Z Last Updated: 2024-10-20T04:33:28.740Z Vendors: braincert.com Products: Virtual Classroom component for Joomla Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extensions.joomla.org/extension/online-virtual-classroom/
CVE ID: CVE-2023-34478 State: PUBLISHED Published: 2023-07-24T18:24:45.619Z Last Updated: 2025-02-13T16:55:37.269Z Vendors: Apache Software Foundation Products: Apache Shiro Problem Types: CWE-22 Description: Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qk - http://www.openwall.com/lists/oss
ment: References: - https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qk - http://www.openwall.com/lists/oss-security/2023/07/24/4 - https://security.netapp.com/advisory/ntap-20230915-0005/
CVE ID: CVE-2023-34486 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T18:22:32.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/JunyanYip/itsourcecode_justines_xss_vul
CVE ID: CVE-2023-34487 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T17:16:19.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/JunyanYip/itsourcecode_justines_sql_vul
CVE ID: CVE-2023-34488 State: PUBLISHED Published: 2023-06-12T00:00:00.000Z Last Updated: 2025-08-29T15:00:06.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq/issues/1181
CVE ID: CVE-2023-34494 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:32:22.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq/issues/1180
CVE ID: CVE-2023-34537 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:19:16.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leekenghwa/CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5
CVE ID: CVE-2023-34540 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2024-08-02T16:10:07.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hwchase17/langchain/issues/4833 - https://github.com/langchain-ai/langchain/pull/6992 - https://github.com/langchain-ai/langchain/releases/tag/v0.0.
833 - https://github.com/langchain-ai/langchain/pull/6992 - https://github.com/langchain-ai/langchain/releases/tag/v0.0.225
CVE ID: CVE-2023-34541 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:11:02.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hwchase17/langchain/issues/4849
CVE ID: CVE-2023-34545 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T18:40:19.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cszcms.com/ - https://gist.github.com/komomon/24d3ea391af6f067c044fa47cb6c20d8
CVE ID: CVE-2023-34548 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T16:00:30.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/SCRMS-2023-05-27-1.0
CVE ID: CVE-2023-34551 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T18:29:21.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C
rsions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214. The impact is: execute arbitrary code (remote). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ezviz.com - https://www.ezviz.com/data-security/security-notice/detail/827
CVE ID: CVE-2023-34552 State: PUBLISHED Published: 2023-08-01T00:00:00.000Z Last Updated: 2025-02-12T18:48:59.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol can allow an unauthenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versi