Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14790 State: PUBLISHED Published: 2018-10-01T13:00:00Z Last Updated: 2024-09-17T03:32:22.942Z Vendors: Fuji Electric Products: FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace Problem Types: CWE-126 Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105408 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
CVE ID: CVE-2018-14791 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-16T22:51:13.585Z Vendors: Emerson Products: DeltaV DCS Problem Types: CWE-269 Description: Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-228-01 - http://www.securityfocus.com/bid/105105
CVE ID: CVE-2018-14792 State: PUBLISHED Published: 2018-09-19T15:00:00Z Last Updated: 2024-09-16T20:27:47.262Z Vendors: WECON Products: PLC Editor Problem Types: CWE-121 Description: WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-261-01
CVE ID: CVE-2018-14793 State: PUBLISHED Published: 2018-08-21T14:00:00Z Last Updated: 2024-09-16T23:46:15.627Z Vendors: ICS-CERT Products: DeltaV Problem Types: CWE-121 Description: DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-228-01 - http://www.securityfocus.com/bid/105105
CVE ID: CVE-2018-14794 State: PUBLISHED Published: 2018-10-01T13:00:00Z Last Updated: 2024-09-16T17:14:37.175Z Vendors: Fuji Electric Products: Alpha5 Smart Loader Problem Types: CWE-122 Description: Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105411 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02
CVE ID: CVE-2018-14795 State: PUBLISHED Published: 2018-08-21T14:00:00Z Last Updated: 2024-09-16T20:26:38.250Z Vendors: ICS-CERT Products: DeltaV Problem Types: CWE-23 Description: DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-228-01 - http://www.securityfocus.com/bid/105105
CVE ID: CVE-2018-14796 State: PUBLISHED Published: 2018-09-20T19:00:00Z Last Updated: 2024-09-17T02:21:06.554Z Vendors: Tec4Data Products: SmartCooler Problem Types: CWE-306 Description: Tec4Data SmartCooler, all versions prior to firmware 180806, the device responds to a remote unauthenticated reboot command that may be used to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-263-01
CVE ID: CVE-2018-14797 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-17T04:19:50.624Z Vendors: Emerson Products: DeltaV DCS Problem Types: CWE-427 Description: Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-228-01 - http://www.securityfocus.com/bid/105105
CVE ID: CVE-2018-14798 State: PUBLISHED Published: 2018-10-01T13:00:00Z Last Updated: 2024-09-16T23:41:07.456Z Vendors: Fuji Electric Products: FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace Problem Types: CWE-125 Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105408 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
CVE ID: CVE-2018-14799 State: PUBLISHED Published: 2018-08-22T18:00:00Z Last Updated: 2024-09-17T02:52:10.387Z Vendors: Philips Products: PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs Problem Types: CWE-20 Description: In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01 - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105103
CVE ID: CVE-2018-14800 State: PUBLISHED Published: 2018-10-03T13:00:00Z Last Updated: 2024-09-17T00:56:00.140Z Vendors: Delta Electronics Products: ISPSoft Problem Types: CWE-121 Description: Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-275-01 - http://www.securityfocus.com/bid/105485
CVE ID: CVE-2018-14801 State: PUBLISHED Published: 2018-08-22T18:00:00Z Last Updated: 2024-09-17T01:36:43.400Z Vendors: Philips Products: PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs Problem Types: CWE-798 Description: In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset existing passwords. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01 - https://www.usa.philips.com/health
am Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-228-01 - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105103
CVE ID: CVE-2018-14802 State: PUBLISHED Published: 2018-10-01T13:00:00Z Last Updated: 2024-09-16T19:47:13.278Z Vendors: Fuji Electric Products: FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace Problem Types: CWE-121 Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105408 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
CVE ID: CVE-2018-14803 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-17T02:06:47.929Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-200 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to the attacker, but might be useful information in an attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product
lyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-14804 State: PUBLISHED Published: 2018-10-01T16:00:00Z Last Updated: 2024-09-17T00:16:05.252Z Vendors: Emerson Products: AMS Device Manager Problem Types: CWE-284 Description: Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-01 - http://www.securityfocus.com/bid/105406
CVE ID: CVE-2018-14805 State: PUBLISHED Published: 2018-08-29T16:00:00Z Last Updated: 2024-09-17T04:29:00.499Z Vendors: ICS-CERT Products: ABB eSOMS Problem Types: CWE-287 Description: ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107046A5821&LanguageCode=en&DocumentPartId=&Action=Launch - https://ics-cert.us-cert.gov/advisories/ICSA-18-240-04 - http://www.securityfocu
Code=en&DocumentPartId=&Action=Launch - https://ics-cert.us-cert.gov/advisories/ICSA-18-240-04 - http://www.securityfocus.com/bid/105169
CVE ID: CVE-2018-14806 State: PUBLISHED Published: 2018-10-23T20:00:00Z Last Updated: 2024-09-16T20:32:50.100Z Vendors: Advantech Products: Advantech WebAccess Problem Types: CWE-22 Description: Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041939 - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C - http://www.securityfocus.com/bid/105728
CVE ID: CVE-2018-14807 State: PUBLISHED Published: 2018-10-18T21:00:00Z Last Updated: 2024-09-17T00:26:04.397Z Vendors: Opto 22 Products: PAC Control Basic and PAC Control Professional Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.opto22.com/support/resources-tools/knowledgebase/kb87547 - https://ics-cert.us-cert.gov/advisories/ICSA-18-247-01
CVE ID: CVE-2018-14808 State: PUBLISHED Published: 2018-10-01T16:00:00Z Last Updated: 2024-09-17T03:54:18.431Z Vendors: Emerson Products: AMS Device Manager Problem Types: CWE-269 Description: Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-01 - http://www.securityfocus.com/bid/105406
CVE ID: CVE-2018-14809 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-16T22:03:37.405Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-416 Description: Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01
CVE ID: CVE-2018-14810 State: PUBLISHED Published: 2018-10-08T13:00:00Z Last Updated: 2024-09-16T18:18:08.589Z Vendors: WECON Products: PI Studio HMI, PI Studio Problem Types: CWE-787 Description: WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01
CVE ID: CVE-2018-14811 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-16T20:41:49.709Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-822 Description: Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14812 State: PUBLISHED Published: 2018-10-24T21:00:00Z Last Updated: 2024-09-17T03:07:57.356Z Vendors: Fuji Electric Products: Energy Savings Estimator Problem Types: CWE-427 Description: An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-282-07 - http://www.securityfocus.com/bid/105543
CVE ID: CVE-2018-14813 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-17T01:26:31.392Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-122 Description: Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14814 State: PUBLISHED Published: 2019-03-27T19:50:08 Last Updated: 2024-08-05T09:38:14.118Z Vendors: WECON Products: WECON Technology PI Studio HMI Problem Types: CWE-125 Description: WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01
CVE ID: CVE-2018-14815 State: PUBLISHED Published: 2018-09-26T20:00:00 Last Updated: 2024-08-05T09:38:13.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuji Electric V-Server 4.0.3.0 and prior, Several out-of-bounds write vulnerabilities have been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14816 State: PUBLISHED Published: 2018-10-23T20:00:00Z Last Updated: 2024-09-17T02:01:48.026Z Vendors: Advantech Products: Advantech WebAccess Problem Types: CWE-121 Description: Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041939 - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C - http://www.securityfocus.com/bid/105728
CVE ID: CVE-2018-14817 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-16T22:09:53.694Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-191 Description: Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14818 State: PUBLISHED Published: 2018-10-08T13:00:00Z Last Updated: 2024-09-17T02:37:32.231Z Vendors: WECON Products: PI Studio HMI, PI Studio Problem Types: CWE-121 Description: WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01
CVE ID: CVE-2018-14819 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-16T16:47:54.538Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-125 Description: Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14820 State: PUBLISHED Published: 2018-10-23T20:00:00Z Last Updated: 2024-09-16T23:05:35.703Z Vendors: Advantech Products: Advantech WebAccess Problem Types: CWE-73 Description: Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041939 - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C - http://www.securityfocus.com/bid/105728
CVE ID: CVE-2018-14821 State: PUBLISHED Published: 2018-09-20T20:00:00Z Last Updated: 2024-09-17T00:35:32.767Z Vendors: Rockwell Automation Products: RSLinx Classic Problem Types: CWE-122 Description: Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02 - https://www.tenable.com/security/research/tra-2018-26
CVE ID: CVE-2018-14822 State: PUBLISHED Published: 2018-10-02T21:00:00Z Last Updated: 2024-09-16T18:08:24.856Z Vendors: Entes Products: EMG12 Problem Types: CWE-598 Description: Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-275-03 - http://www.securityfocus.com/bid/105489
CVE ID: CVE-2018-14823 State: PUBLISHED Published: 2018-09-26T20:00:00Z Last Updated: 2024-09-17T02:16:13.438Z Vendors: Fuji Electric Products: V-Server Problem Types: CWE-121 Description: Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 - http://www.securityfocus.com/bid/105341
CVE ID: CVE-2018-14824 State: PUBLISHED Published: 2018-09-27T21:00:00Z Last Updated: 2024-09-17T00:31:20.583Z Vendors: Delta Electronics Products: Delta Industrial Automation PMSoft Problem Types: CWE-125 Description: Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information. Additional Analyst Notes: - CVE Program Container: References: - http://www.deltaww.com/services/DownloadCenter2.aspx?secID=8&pid=2&tid=0&CID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US - h
ID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US - http://www.securityfocus.com/bid/105409 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-04
CVE ID: CVE-2018-14825 State: PUBLISHED Published: 2018-09-24T20:00:00Z Last Updated: 2024-09-17T01:26:43.460Z Vendors: Honeywell Products: Mobile Computers Problem Types: CWE-269 Description: On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and ED
nning Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges. This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2018-016 - http://www.securityfocus.com/bid/105767 - https://ics-cert.us-cert.gov/
s://cert.vde.com/de-de/advisories/vde-2018-016 - http://www.securityfocus.com/bid/105767 - https://ics-cert.us-cert.gov/advisories/ICSA-18-256-01
CVE ID: CVE-2018-14826 State: PUBLISHED Published: 2018-10-02T21:00:00Z Last Updated: 2024-09-16T19:09:07.640Z Vendors: Entes Products: EMG12 Problem Types: CWE-287 Description: Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted URL. This could allow for remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-275-03 - http://www.securityfocus.com/bid/105489
CVE ID: CVE-2018-14827 State: PUBLISHED Published: 2018-09-20T20:00:00Z Last Updated: 2024-09-16T19:14:30.799Z Vendors: Rockwell Automation Products: RSLinx Classic Problem Types: CWE-400 Description: Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionality. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02
CVE ID: CVE-2018-14828 State: PUBLISHED Published: 2018-10-23T20:00:00Z Last Updated: 2024-09-16T19:30:10.895Z Vendors: Advantech Products: Advantech WebAccess Problem Types: CWE-269 Description: Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041939 - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C - http://www.securityfocus.com/bid/105728