Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
) and operates on a maliciously crafted MyCode message. This may occur on pages where message content is pre-filled using a GET/POST parameter, or on reply pages where a previously saved malicious message is quoted. The impact is be mitigated when: 1. the visual editor is disabled globally (_Admin CP → Configuration → Settings → Clickable Smilies and BB Code: [Clickable MyCode Editor](https://github.com/mybb/mybb/blob/mybb_1836/install/resources/settings.xml#L2087-L2094)_ is set to _Off_), or 2. the visual editor is disabled for individual user accounts (_User CP → Your Profile → Edit Options_: _Show the MyCode formatting options on the posting pages_ checkbox is not checked). MyBB 1.8.37 re
file → Edit Options_: _Show the MyCode formatting options on the posting pages_ checkbox is not checked). MyBB 1.8.37 resolves this issue with the commit `6dcaf0b4d`. Users are advised to upgrade. Users unable to upgrade may mitigate the impact without upgrading MyBB by changing the following setting (_Admin CP → Configuration → Settings_): - _Clickable Smilies and BB Code → [Clickable MyCode Editor](https://github.com/mybb/mybb/blob/mybb_1836/install/resources/settings.xml#L2087-L2094)_: _Off_. Similarly, individual MyBB forum users are able to disable the visual editor by diabling the account option (_User CP → Your Profile → Edit Options_) _Show the MyCode formatting options on the postin
diabling the account option (_User CP → Your Profile → Edit Options_) _Show the MyCode formatting options on the posting pages_. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mybb/mybb/security/advisories/GHSA-wj33-q7vj-9fr8 - https://github.com/mybb/mybb/commit/6dcaf0b4db6254f1833fe8dae295d9ddc2219276 - https://mybb.com/versions/1.8.37/
CVE ID: CVE-2023-46252 State: PUBLISHED Published: 2023-11-07T19:00:58.743Z Last Updated: 2024-09-04T15:22:43.945Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: Squidex Products: squidex Problem Types: CWE-79 Description: Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting (XSS) vulnerability. The editor-sdk.js file defines three different class-like functions, which employ a global message event listener: SquidexSidebar, SquidexWidget, and SquidexFormField. The registered event listener takes some action based on the type of th
dexSidebar, SquidexWidget, and SquidexFormField. The registered event listener takes some action based on the type of the received message. For example, when the SquidexFormField receives a message with the type valueChanged, the value property is updated. The SquidexFormField class is for example used in the editor-editorjs.html file, which can be accessed via the public wwwroot folder. It uses the onValueChanged method to register a callback function, which passes the value provided from the message event to the editor.render. Passing an attacker-controlled value to this function introduces a Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CIS
function introduces a Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squidex/squidex/security/advisories/GHSA-7q4f-fprr-5jw8
CVE ID: CVE-2023-46253 State: PUBLISHED Published: 2023-11-07T18:56:21.631Z Last Updated: 2024-09-04T18:09:47.423Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Squidex Products: squidex Problem Types: CWE-22 Description: Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore feature which allows an authenticated attacker to gain remote code execution (RCE). Squidex allows users with the `squidex.admin.restore` permission to create and restore backups. Part of these backups are the assets uploaded to an App. For each asset, the backup zip archive cont
nd restore backups. Part of these backups are the assets uploaded to an App. For each asset, the backup zip archive contains a `.asset` file with the actual content of the asset as well as a related `AssetCreatedEventV2` event, which is stored in a JSON file. Amongst other things, the JSON file contains the event type (`AssetCreatedEventV2`), the ID of the asset (`46c05041-9588-4179-b5eb-ddfcd9463e1e`), its filename (`test.txt`), and its file version (`0`). When a backup with this event is restored, the `BackupAssets.ReadAssetAsync` method is responsible for re-creating the asset. For this purpose, it determines the name of the `.asset` file in the zip archive, reads its content, and stores
asset. For this purpose, it determines the name of the `.asset` file in the zip archive, reads its content, and stores the content in the filestore. When the asset is stored in the filestore via the UploadAsync method, the assetId and fileVersion are passed as arguments. These are further passed to the method GetFileName, which determines the filename where the asset should be stored. The assetId is inserted into the filename without any sanitization and an attacker with squidex.admin.restore privileges to run arbitrary operating system commands on the underlying server (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squide
CE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Squidex/squidex/security/advisories/GHSA-phqq-8g7v-3pg5
CVE ID: CVE-2023-46254 State: PUBLISHED Published: 2023-11-06T18:34:13.555Z Last Updated: 2024-08-02T20:37:40.135Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: projectcapsule Products: capsule-proxy Problem Types: CWE-200 Description: capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. For example consider two tenants `solar` and `wind`. Tenant `solar`, owned by a ServiceAccount named `tenant-owner` in the Namespace `solar`. Tenant `wind`, owned by a
ind`. Tenant `solar`, owned by a ServiceAccount named `tenant-owner` in the Namespace `solar`. Tenant `wind`, owned by a ServiceAccount named `tenant-owner` in the Namespace `wind`. The Tenant owner `solar` would be able to list the namespaces of the Tenant `wind` and vice-versa, although this is not correct. The bug introduces an exfiltration vulnerability since allows the listing of Namespace resources of other Tenants, although just in some specific conditions: 1. `capsule-proxy` runs with the `--disable-caching=false` (default value: `false`) and 2. Tenant owners are ServiceAccount, with the same resource name, but in different Namespaces. This vulnerability doesn't allow any privilege e
rviceAccount, with the same resource name, but in different Namespaces. This vulnerability doesn't allow any privilege escalation on the outer tenant Namespace-scoped resources, since the Kubernetes RBAC is enforcing this. This issue has been addressed in version 0.4.5. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-6758-979h-249x - https://github.com/projectcapsule/capsule-proxy/commit/615202f7b02eaec7681336bd63daed1f39ae00c5
CVE ID: CVE-2023-46255 State: PUBLISHED Published: 2023-10-31T15:25:24.933Z Last Updated: 2024-09-05T20:16:15.166Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: authzed Products: spicedb Problem Types: CWE-532 Description: SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to version 1.27.0-rc1, when the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full URI (including the provided password) is printed, so that the password is shown in the logs. Version 1.27.0-rc1 patches this issue. Additional Analyst Notes: - CVE Program Container
password is shown in the logs. Version 1.27.0-rc1 patches this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/authzed/spicedb/security/advisories/GHSA-jg7w-cxjv-98c2 - https://github.com/authzed/spicedb/commit/ae50421b80f895e4c98d999b18e06b6f1e6f1cf8
CVE ID: CVE-2023-46256 State: PUBLISHED Published: 2023-10-31T15:29:05.943Z Last Updated: 2024-09-05T20:15:19.837Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:L) Vendors: PX4 Products: PX4-Autopilot Problem Types: CWE-122, CWE-120 Description: PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value checking. A malfunction of the sensor device can cause a heap buffer overflow with leading unexpected drone behavior. Malicious applications can exploit the vulnerability even if device sensor malfunction does
g unexpected drone behavior. Malicious applications can exploit the vulnerability even if device sensor malfunction does not occur. Up to the maximum value of an `unsigned int`, bytes sized data can be written to the heap memory area. As of time of publication, no fixed version is available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-5hvv-q2r5-rppw - https://github.com/PX4/PX4-Autopilot/blob/main/src/drivers/distance_sensor/lightware_laser_serial/parser.cpp#L87
CVE ID: CVE-2023-46257 State: PUBLISHED Published: 2023-12-19T15:43:26.308Z Last Updated: 2025-05-06T18:54:15.799Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46258 State: PUBLISHED Published: 2023-12-19T15:43:26.342Z Last Updated: 2024-08-02T20:37:40.140Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46259 State: PUBLISHED Published: 2023-12-19T15:43:26.279Z Last Updated: 2024-08-02T20:37:40.250Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46260 State: PUBLISHED Published: 2023-12-19T15:43:26.348Z Last Updated: 2024-11-27T15:13:51.763Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46261 State: PUBLISHED Published: 2023-12-19T15:43:26.352Z Last Updated: 2024-08-02T20:37:40.182Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46262 State: PUBLISHED Published: 2023-12-19T15:43:26.338Z Last Updated: 2024-08-02T20:37:40.231Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Avalanche Description: An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46263 State: PUBLISHED Published: 2023-12-19T15:43:26.291Z Last Updated: 2024-08-02T20:37:40.211Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46264 State: PUBLISHED Published: 2023-12-19T15:43:26.340Z Last Updated: 2024-09-04T19:43:27.139Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46265 State: PUBLISHED Published: 2023-12-19T15:43:26.312Z Last Updated: 2024-09-16T18:34:33.258Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Ivanti Products: Avalanche Description: An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46266 State: PUBLISHED Published: 2023-12-19T15:43:26.348Z Last Updated: 2024-08-02T20:37:40.234Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Ivanti Products: Avalanche Description: An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-46267 State: REJECTED Published: N/A Last Updated: 2023-10-21T20:22:59.052877 Description: No description available.
CVE ID: CVE-2023-46270 State: PUBLISHED Published: 2024-04-29T00:00:00.000Z Last Updated: 2025-03-28T18:54:09.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://theunarchiver.com - https://updates.devmate.com/releasenotes/143/com.macpaw.site.theunarchiver.html
CVE ID: CVE-2023-46271 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-20T15:15:31.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://extremenetworks.com - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115354&q=CVE-2023-46271 - https://www.zerodayinitiative.com/advisories/ZDI-23-1766/
CVE ID: CVE-2023-46272 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-20T16:47:44.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ah_auth service Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115355&q=CVE-2023-46272 - https://www.zerodayinitiative.com/advisories/ZDI-23-1765/
CVE ID: CVE-2023-46277 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T14:43:57.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/edneville/please/-/issues/13 - https://gitlab.com/edneville/please/-/merge_requests/69#note_1594254575 - https://github.com/rustsec/advisory-db/pull/1798 - https://rustsec.org/advisories/RUSTSEC-2023-0066.html
CVE ID: CVE-2023-46278 State: PUBLISHED Published: 2023-10-31T23:01:20.135Z Last Updated: 2024-09-05T19:48:06.827Z Vendors: Cybozu, Inc. Products: Cybozu Remote Service Problem Types: Uncontrolled Resource Consumption Description: Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed communication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cs.cybozu.co.jp/2023/010657.html - https://jvn.jp/en/jp/JVN94132951/
CVE ID: CVE-2023-46279 State: PUBLISHED Published: 2023-12-15T08:15:56.146Z Last Updated: 2025-02-13T17:14:24.160Z Vendors: Apache Software Foundation Products: Apache Dubbo Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/zw53nxrkrfswmk9n3sfwxmcj7x030nmo - http://www.openwall.com/lists/oss-security/2023/12/15/3
CVE ID: CVE-2023-46280 State: PUBLISHED Published: 2024-05-14T10:01:52.069Z Last Updated: 2024-12-10T13:53:28.579Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Security Configuration Tool (SCT), SIMATIC Automation Tool, SIMATIC BATCH V9.1, SIMATIC NET PC Software V16, SIMATIC NET PC Software V17, SIMATIC NET PC Software V18, SIMATIC NET PC Software V19, SIMATIC PCS 7 V9.1, SIMATIC PDM V9.2, SIMATIC Route Control V9.1, SIMATIC S7-PCT, SIMATIC STEP 7 V5, SIMATIC WinCC OA V3.17, SIMATIC WinCC OA V3.18, SIMATIC WinCC OA V3.19, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional V16, SIMATIC WinCC Runtime Professi
C WinCC OA V3.19, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional V16, SIMATIC WinCC Runtime Professional V17, SIMATIC WinCC Runtime Professional V18, SIMATIC WinCC Runtime Professional V19, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5, SIMATIC WinCC V8.0, SINAMICS Startdrive, SINEC NMS, SINUMERIK ONE virtual, SINUMERIK PLC Programming Tool, TIA Portal Cloud Connector, Totally Integrated Automation Portal (TIA Portal) V15.1, Totally Integrated Automation Portal (TIA Portal) V16, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19 Problem Types: CWE-125 Description: A v
n Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19 Problem Types: CWE-125 Description: A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 Upd5), SIMATIC NET PC Software V16 (All versions < V16 Update 8), SIMATIC NET PC Software V17 (All versions), SIMATIC NET PC Software V18 (All versions < V18 SP1), SIMATIC NET PC Software V19 (All versions < V19 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PDM V9.2 (All versions < V9.2 SP2 Upd3), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 Upd3), SIMATIC S7-PCT (A
IC PDM V9.2 (All versions < V9.2 SP2 Upd3), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 Upd3), SIMATIC S7-PCT (All versions < V3.5 SP3 Update 6), SIMATIC STEP 7 V5 (All versions < V5.7 SP3), SIMATIC WinCC OA V3.17 (All versions), SIMATIC WinCC OA V3.18 (All versions < V3.18 P025), SIMATIC WinCC OA V3.19 (All versions < V3.19 P010), SIMATIC WinCC Runtime Advanced (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 6), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7
18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5), SINAMICS Startdrive (All versions < V19 SP1), SINEC NMS (All versions < V3.0), SINEC NMS (All versions < V3.0 SP1), SINUMERIK ONE virtual (All versions < V6.23), SINUMERIK PLC Programming Tool (All versions < V3.3.12), TIA Portal Cloud Connector (All versions < V2.0), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA P
ions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 4), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 2). The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-962515.html - https://cert-portal.siemens.com/
ainer: References: - https://cert-portal.siemens.com/productcert/html/ssa-962515.html - https://cert-portal.siemens.com/productcert/html/ssa-784301.html - https://cert-portal.siemens.com/productcert/html/ssa-331112.html
CVE ID: CVE-2023-46281 State: PUBLISHED Published: 2023-12-12T11:27:11.796Z Last Updated: 2025-01-14T10:29:50.318Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: Opcenter Execution Foundation, Opcenter Quality, SIMATIC PCS neo, SINEC NMS, Totally Integrated Automation Portal (TIA Portal) V14, Totally Integrated Automation Portal (TIA Portal) V15.1, Totally Integrated Automation Portal (TIA Portal) V16, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18 Problem Types: CWE-942 Description: A vulnerability has been identified in Opcenter Execution Foundation (All versions <