Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-6782 State: PUBLISHED Published: 2019-09-09T19:17:09 Last Updated: 2024-08-04T20:31:04.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6). An authorization issue allows the contributed project information of a private profile to be viewed. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/52677
CVE ID: CVE-2019-6783 State: PUBLISHED Published: 2019-09-09T19:19:45 Last Updated: 2024-08-04T20:31:04.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a directory traversal vulnerability that could lead to remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/55827
CVE ID: CVE-2019-6784 State: PUBLISHED Published: 2019-09-09T19:21:45 Last Updated: 2024-08-04T20:31:04.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 1 of 2). Markdown fields contain a lack of input validation and output encoding when processing KaTeX that results in a persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54416
CVE ID: CVE-2019-6785 State: PUBLISHED Published: 2019-09-09T19:26:05 Last Updated: 2024-08-04T20:31:04.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/52212
CVE ID: CVE-2019-6786 State: PUBLISHED Published: 2019-09-09T19:28:06 Last Updated: 2024-08-04T20:31:04.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 1 of 3). The contents of an LFS object can be accessed by an unauthorized user, if the file size and OID are known. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-workhorse/issues/197
CVE ID: CVE-2019-6787 State: PUBLISHED Published: 2019-05-17T15:49:11 Last Updated: 2024-08-04T20:31:04.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitLab API allowed project Maintainers and Owners to view the trigger tokens of other project users. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE ID: CVE-2019-6788 State: PUBLISHED Published: 2019-09-09T19:30:25 Last Updated: 2024-08-04T20:31:04.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 3 of 6). For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect to obtain the user OAuth token for those services. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues
.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56663
CVE ID: CVE-2019-6789 State: PUBLISHED Published: 2019-09-09T19:32:53 Last Updated: 2024-08-04T20:31:04.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 4 of 6). In some cases, users without project permissions will receive emails after a project move. For private projects, this will disclose the new project namespace to an unauthorized user. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com
References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/44558
CVE ID: CVE-2019-6790 State: PUBLISHED Published: 2019-05-17T15:53:27 Last Updated: 2024-08-04T20:31:04.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. Guest users were able to view the list of a group's merge requests. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/51328
CVE ID: CVE-2019-6791 State: PUBLISHED Published: 2019-09-09T20:25:04 Last Updated: 2024-08-04T20:31:04.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 3 of 3). When a project with visibility more permissive than the target group is imported, it will retain its prior visibility. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE ID: CVE-2019-6792 State: PUBLISHED Published: 2019-09-09T19:37:13 Last Updated: 2024-08-04T20:31:04.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54867
CVE ID: CVE-2019-6793 State: PUBLISHED Published: 2019-09-09T19:39:25 Last Updated: 2024-08-04T20:31:04.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/50748
CVE ID: CVE-2019-6794 State: PUBLISHED Published: 2019-09-09T19:41:20 Last Updated: 2024-08-04T20:31:04.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 5 of 6). A project guest user can view the last commit status of the default branch. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54353
CVE ID: CVE-2019-6795 State: PUBLISHED Published: 2019-09-09T19:43:18 Last Updated: 2024-08-04T20:31:04.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social engineering. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/29365
CVE ID: CVE-2019-6796 State: PUBLISHED Published: 2019-04-11T19:51:41 Last Updated: 2024-08-04T20:31:04.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation and output encoding that results in a persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/ - https://gitl
released/ - https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/57112 - https://gitlab.com/gitlab-org/gitlab-ce/issues/55320
CVE ID: CVE-2019-6797 State: PUBLISHED Published: 2019-05-17T15:59:00 Last Updated: 2024-08-04T20:31:04.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE ID: CVE-2019-6798 State: PUBLISHED Published: 2019-01-26T17:00:00 Last Updated: 2024-08-04T20:31:04.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106727 - https://www.phpmyadmin.net/security/PMASA-2019-2/
CVE ID: CVE-2019-6799 State: PUBLISHED Published: 2019-01-26T17:00:00 Last Updated: 2024-08-04T20:31:04.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2019-1/ - https://lists.debian.org/debian-lt
Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2019-1/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00039.html - http://www.securityfocus.com/bid/106736
CVE ID: CVE-2019-6800 State: PUBLISHED Published: 2019-06-05T18:05:02 Last Updated: 2024-08-04T20:31:04.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.spamtitan.com/category/spamtitan-news/ - https://write-up.github.io/CVE-2019-6800/
CVE ID: CVE-2019-6802 State: PUBLISHED Published: 2019-01-25T04:00:00 Last Updated: 2024-08-04T20:31:04.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pypiserver/pypiserver/issues/237
CVE ID: CVE-2019-6803 State: PUBLISHED Published: 2019-01-25T05:00:00 Last Updated: 2024-08-04T20:31:04.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typora/typora-issues/issues/2124
CVE ID: CVE-2019-6804 State: PUBLISHED Published: 2019-01-25T05:00:00 Last Updated: 2024-08-04T20:31:04.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rundeck/rundeck/issues/4406 - https://docs.rundeck.com/docs/history/version-3.0.13.html - https://www.exploit-db.com/exploits/46251/
CVE ID: CVE-2019-6805 State: PUBLISHED Published: 2019-01-25T08:00:00Z Last Updated: 2024-09-16T23:06:12.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0FuzzingQ/vuln/blob/master/s-cms
CVE ID: CVE-2019-6806 State: PUBLISHED Published: 2019-05-22T20:04:46 Last Updated: 2024-08-04T20:31:04.311Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-
lectric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0769
CVE ID: CVE-2019-6807 State: PUBLISHED Published: 2019-05-22T20:05:13 Last Updated: 2024-08-04T20:31:04.152Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_report
w.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0770
CVE ID: CVE-2019-6808 State: PUBLISHED Published: 2019-05-22T20:05:50 Last Updated: 2024-08-04T20:31:04.192Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS
ider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0771
CVE ID: CVE-2019-6809 State: PUBLISHED Published: 2019-09-17T19:50:29 Last Updated: 2024-08-04T20:31:04.229Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340, Modicon Premium, Modicon Quantum Problem Types: CWE-248 Description: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE ID: CVE-2019-6810 State: PUBLISHED Published: 2019-09-17T19:52:38 Last Updated: 2024-08-04T20:31:04.285Z Vendors: Schneider Electric SE Products: BMXNOR0200H Ethernet / Serial RTU module Problem Types: CWE-284 Description: CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/ - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-6811 State: PUBLISHED Published: 2019-09-17T19:55:08 Last Updated: 2024-08-04T20:31:04.258Z Vendors: Schneider Electric SE Products: Modicon Quantum 140 NOE771x1 Problem Types: CWE-754 Description: An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-253-02/
CVE ID: CVE-2019-6812 State: PUBLISHED Published: 2019-05-22T19:48:25 Last Updated: 2024-08-04T20:31:04.117Z Vendors: n/a Products: Modicon RTU Module, BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 Problem Types: CWE-798 Description: A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-06/ - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-6813 State: PUBLISHED Published: 2019-09-17T19:56:55 Last Updated: 2024-08-04T20:31:04.281Z Vendors: CVE-2019-6813 Products: BMXNOR0200H Ethernet / Serial RTU module, Modicon M340 controller Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/ - h
es: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/ - https://www.schneider-electric.com/en/download/document/SEVD-2019-225-02/ - https://security.cse.iitk.ac.in/responsible-disclosure
CVE ID: CVE-2019-6814 State: PUBLISHED Published: 2019-05-22T19:38:32 Last Updated: 2024-08-04T20:31:04.237Z Vendors: n/a Products: ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê Problem Types: CWE-287 Description: A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-134-01/
CVE ID: CVE-2019-6815 State: PUBLISHED Published: 2019-05-22T19:52:28 Last Updated: 2024-08-04T20:31:04.243Z Vendors: n/a Products: Modicon Quantum - all firmware versions Problem Types: Multiple Vulnerabilities Description: In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-09/
CVE ID: CVE-2019-6816 State: PUBLISHED Published: 2019-05-22T19:54:08 Last Updated: 2024-08-04T20:31:04.248Z Vendors: n/a Products: Modicon Quantum - all firmware versions Problem Types: Multiple Vulnerabilities Description: In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-09/
CVE ID: CVE-2019-6819 State: PUBLISHED Published: 2019-05-22T19:45:08 Last Updated: 2024-08-04T20:31:04.277Z Vendors: n/a Products: Modicon Controllers, Modicon M340 - firmware versions prior to V3.01 Modicon M580 - firmware versions prior to V2.80 All firmware versions of Modicon Quantum and Modicon Premium Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon
ns prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-05/ - http://www.securityfocus.com/bid/109004
CVE ID: CVE-2019-6820 State: PUBLISHED Published: 2019-05-22T19:40:20 Last Updated: 2024-08-04T20:31:04.357Z Vendors: n/a Products: Modicon and PacDrive Controller, All versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2 Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IM