Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-25311 State: PUBLISHED Published: 2022-03-08T00:00:00.000Z Last Updated: 2025-04-21T13:55:26.745Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C) Vendors: Siemens Products: SINEC NMS, SINEMA Server V14 Problem Types: CWE-269 Description: A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation. Additional Analyst Not
f control. This could allow an authenticated low privileged user to achieve privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf
CVE ID: CVE-2022-25312 State: PUBLISHED Published: 2022-03-04T23:25:08 Last Updated: 2024-08-03T04:36:06.814Z Vendors: Apache Software Foundation Products: Apache Any23 Problem Types: An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor Description: An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions < 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server file
e with an application's processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/y6cm5n3ksohsrhzqknqhzy7p3mtkyk23 - http://www.openwall.com/lists/oss-security/2022/03/04/2
CVE ID: CVE-2022-25313 State: PUBLISHED Published: 2022-02-18T04:23:04.000Z Last Updated: 2025-05-30T19:43:21.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/558 - http://www.openwall.com/lists/oss-security/2022/02/19/1 - https://www.debian.org/security/2022/dsa-5085 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://l
oject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220303-0008/ - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-25314 State: PUBLISHED Published: 2022-02-18T04:25:11.000Z Last Updated: 2025-05-05T16:23:34.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/560 - http://www.openwall.com/lists/oss-security/2022/02/19/1 - https://www.debian.org/security/2022/dsa-5085 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
ject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220303-0008/ - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-25315 State: PUBLISHED Published: 2022-02-18T04:24:43.000Z Last Updated: 2025-05-05T16:23:24.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/559 - http://www.openwall.com/lists/oss-security/2022/02/19/1 - https://www.debian.org/security/2022/dsa-5085 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220303-0008/ - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-25317 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-08-03T04:36:06.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-controlled description. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cerebrate-project/cerebrate/commit/e60d97c214f9ac6df90c87241b3b3554afc06238 - https://zigrin.com/advisories/cerebrate-reflected-xss-in-form-descriptions/
CVE ID: CVE-2022-25318 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-08-03T04:36:06.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cerebrate-project/cerebrate/commit/15190b930ebada9e8d294db57c96832799d9d93e - https://zigrin.com/advisories/cerebrate-an-incorrect-sharing-group-acl/
CVE ID: CVE-2022-25319 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-11-19T19:32:06.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cerebrate-project/cerebrate/commit/a2632349175e574cd6305fa459cd7610ea09ab61 - https://zigrin.com/cakephp-application-cybersecurity-research-forgotten-endpoint-authentication-bypass-with-open-prefix/ - https://zigrin.com/advisories/cerebrate-endpoints-could-be-open-when-not-enabled/
CVE ID: CVE-2022-25320 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-08-03T04:36:06.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cerebrate through 1.4. Username enumeration could occur. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cerebrate-project/cerebrate/commit/88f3cc794486276a1f7e7331adb8ecb2dabd672f - https://zigrin.com/advisories/cerebrate-username-enumeration/
CVE ID: CVE-2022-25321 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-08-03T04:36:06.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cerebrate-project/cerebrate/commit/14ec995c2bd618b181197dc6b64e63fd966b4860 - https://github.com/cerebrate-project/cerebrate/commit/e13b4e7bc5f1a0ff59b52162cc99405e89c0544a - https://zigrin.com/cakephp-application-cybersecurity-research-be-careful-with-reflections-for-your-web-application-security/ - https://zigrin.com/advisories/cerebrate-cross-site-
rch-be-careful-with-reflections-for-your-web-application-security/ - https://zigrin.com/advisories/cerebrate-cross-site-scripting-xss-in-bookmarks/
CVE ID: CVE-2022-25322 State: PUBLISHED Published: 2022-02-18T16:58:09 Last Updated: 2024-08-03T04:36:06.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZEROF Web Server 2.0 allows /HandleEvent SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://awillix.ru - https://github.com/landigv/research/blob/main/cve/CVE-2022-25322.md
CVE ID: CVE-2022-25323 State: PUBLISHED Published: 2022-02-18T16:19:28 Last Updated: 2024-08-03T04:36:06.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZEROF Web Server 2.0 allows /admin.back XSS. Additional Analyst Notes: - CVE Program Container: References: - https://awillix.ru - https://github.com/awillix/research/blob/main/cve/CVE-2022-25323.md
CVE ID: CVE-2022-25324 State: PUBLISHED Published: 2022-05-06T20:00:13.569409Z Last Updated: 2024-09-17T02:41:22.020Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: bignum Problem Types: Denial of Service (DoS) Description: All versions of package bignum are vulnerable to Denial of Service (DoS) due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-BIGNUM-2388581 - https://github.com/justmoon/node-bignum/blob/ef2e02533e598d6df8421000033c4753cde89e
nyk.io/vuln/SNYK-JS-BIGNUM-2388581 - https://github.com/justmoon/node-bignum/blob/ef2e02533e598d6df8421000033c4753cde89ee2/index.js%23L111
CVE ID: CVE-2022-25325 State: PUBLISHED Published: 2022-03-07T09:00:43 Last Updated: 2024-08-03T04:36:06.770Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Use after free Description: Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU90121984/index.html
CVE ID: CVE-2022-25326 State: PUBLISHED Published: 2022-02-25T11:00:13.023Z Last Updated: 2025-04-21T13:56:31.289Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Google LLC Products: fscrypt Problem Types: CWE-400 Description: fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/fscrypt/pull/346
CVE ID: CVE-2022-25327 State: PUBLISHED Published: 2022-02-25T11:00:14.437Z Last Updated: 2025-04-21T13:56:22.478Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Google LLC Products: fscrypt Problem Types: CWE-255 Description: The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
upgrading to version 0.3.3 or above Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/fscrypt/pull/346
CVE ID: CVE-2022-25328 State: PUBLISHED Published: 2022-02-25T11:00:15.758Z Last Updated: 2025-04-21T13:56:13.459Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Google LLC Products: fscrypt Problem Types: CWE-78 Description: The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoint path and if the system administrator happens to be using the fscrypt bash completion script to complete mountpoint paths. We recommend upgrad
m administrator happens to be using the fscrypt bash completion script to complete mountpoint paths. We recommend upgrading to version 0.3.3 or above Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/fscrypt/pull/346
CVE ID: CVE-2022-25329 State: PUBLISHED Published: 2022-02-24T02:45:21 Last Updated: 2024-08-03T04:36:06.803Z Vendors: Trend Micro Products: Trend Micro ServerProtect for Storage, Trend Micro ServerProtect for Microsoft Windows / Novell NetWare, Trend Micro ServerProtect for EMC Celerra, Trend Micro ServerProtect for Network Appliance Filers Problem Types: Static Credential Description: Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions. Addi
th access to the Information Server could exploit this to register to the server and perform authenticated actions. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290507 - https://www.tenable.com/security/research/tra-2022-05
CVE ID: CVE-2022-25330 State: PUBLISHED Published: 2022-02-24T02:45:22 Last Updated: 2024-08-03T04:36:06.908Z Vendors: Trend Micro Products: Trend Micro ServerProtect for Storage, Trend Micro ServerProtect for Microsoft Windows / Novell NetWare, Trend Micro ServerProtect for EMC Celerra, Trend Micro ServerProtect for Network Appliance Filers Problem Types: Command Integer Overflow Description: Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290507 - https:
itional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290507 - https://www.tenable.com/security/research/tra-2022-05
CVE ID: CVE-2022-25331 State: PUBLISHED Published: 2022-02-24T02:45:24 Last Updated: 2024-08-03T04:36:06.923Z Vendors: Trend Micro Products: Trend Micro ServerProtect for Storage, Trend Micro ServerProtect for Microsoft Windows / Novell NetWare, Trend Micro ServerProtect for EMC Celerra, Trend Micro ServerProtect for Network Appliance Filers Problem Types: Command DoS Description: Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000290507 - https://www.tenable.com/security/research/tra-
tainer: References: - https://success.trendmicro.com/solution/000290507 - https://www.tenable.com/security/research/tra-2022-05
CVE ID: CVE-2022-25332 State: PUBLISHED Published: 2023-10-19T09:36:24.924Z Last Updated: 2025-02-27T20:40:23.215Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:L/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:N/MA:N) Vendors: Texas Instruments Products: OMAP Problem Types: CWE-208 Description: The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managing cache contents and collecting timing information for different ciphertext inputs. Using this side channel, the SK_LOAD secure kernel routin
collecting timing information for different ciphertext inputs. Using this side channel, the SK_LOAD secure kernel routine can be used to recover the Customer Encryption Key (CEK). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2022-25333 State: PUBLISHED Published: 2023-10-19T09:35:03.919Z Last Updated: 2024-08-03T04:36:06.868Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:H/MI:H/MA:H) Vendors: Texas Instruments Products: OMAP Problem Types: CWE-347 Description: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validated. An adversary can re-use any correctly signed header and append a forged payload, to be encrypted using the CEK (obtainabl
n adversary can re-use any correctly signed header and append a forged payload, to be encrypted using the CEK (obtainable through CVE-2022-25332) in order to obtain arbitrary code execution in secure context. This constitutes a full break of the TEE security architecture. Additional Analyst Notes: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-25334 State: PUBLISHED Published: 2023-10-19T09:36:09.230Z Last Updated: 2024-08-03T04:36:06.873Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:H/MI:H/MA:H) Vendors: Texas Instruments Products: OMAP Problem Types: CWE-121 Description: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stack overflow, affecting secure kernel data pages. This can be leveraged to obtain arbitrary code execution
ld causes a stack overflow, affecting secure kernel data pages. This can be leveraged to obtain arbitrary code execution in secure supervisor context by overwriting a SHA256 function pointer in the secure kernel data area when loading a forged, unsigned SK_LOAD module encrypted with the CEK (obtainable through CVE-2022-25332). This constitutes a full break of the TEE security architecture. Additional Analyst Notes: - CVE Program Container: References: - https://tetraburst.com/
CVE ID: CVE-2022-25335 State: PUBLISHED Published: 2022-02-18T17:34:58 Last Updated: 2024-08-03T04:36:06.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulation, as exploited in the wild in February 2022. NOTE: although 2022-02-17 is the vendor's vulnerability announcement date, the vulnerability will not be remediated until a major protocol upgrade occurs. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/RigoBlock/status/1494351180713050116 - https://etherscan.io/tx/0x5a6c108d5a729be2011cd47590583a04444d4e7c85cd0427071b968edc
oBlock/status/1494351180713050116 - https://etherscan.io/tx/0x5a6c108d5a729be2011cd47590583a04444d4e7c85cd0427071b968edc3bfc1f - https://etherscan.io/contractdiffchecker?a1=0x876b9ebd725d1fa0b879fcee12560a6453b51dc8 - https://twitter.com/danielvf/status/1494317265835147272 - https://raw.globalsecuritydatabase.org/GSD-2022-1000077
CVE ID: CVE-2022-25336 State: PUBLISHED Published: 2022-02-18T17:49:08 Last Updated: 2024-08-03T04:36:06.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced. Additional Analyst Notes: - CVE Program Container: References: - https://developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization
CVE ID: CVE-2022-25337 State: PUBLISHED Published: 2022-02-18T17:48:48 Last Updated: 2024-08-03T04:36:06.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames. Additional Analyst Notes: - CVE Program Container: References: - https://developers.ibexa.co/security-advisories/ibexa-sa-2022-001-image-filenames-sanitization
CVE ID: CVE-2022-25338 State: PUBLISHED Published: 2022-04-07T14:01:39 Last Updated: 2024-08-03T04:36:06.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/cve-2022-25338/
CVE ID: CVE-2022-25339 State: PUBLISHED Published: 2022-04-07T14:21:22 Last Updated: 2024-08-03T04:36:06.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/cve-2022-25339/
CVE ID: CVE-2022-25342 State: PUBLISHED Published: 2022-04-20T12:51:47 Last Updated: 2024-08-03T04:36:06.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and functionality under the /mngset/authset path. By not verifying permissions for access to resources, it allows a potential attacker to view pages that are not allowed. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-25343 State: PUBLISHED Published: 2022-04-20T12:51:55 Last Updated: 2024-08-03T04:36:06.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the service provided by the Web Application. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-25344 State: PUBLISHED Published: 2022-04-20T12:52:05 Last Updated: 2024-08-03T04:36:06.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01.Hostname field, before saving them on the server. In addition, the JavaScript malicious content is then reflected back to the end user and executed by the web browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html