Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-4777 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:27.188Z Description: No description available.
CVE ID: CVE-2018-4778 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:27.627Z Description: No description available.
CVE ID: CVE-2018-4779 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:28.154Z Description: No description available.
CVE ID: CVE-2018-4780 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:28.508Z Description: No description available.
CVE ID: CVE-2018-4781 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:28.875Z Description: No description available.
CVE ID: CVE-2018-4782 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:29.330Z Description: No description available.
CVE ID: CVE-2018-4783 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:29.700Z Description: No description available.
CVE ID: CVE-2018-4784 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:30.106Z Description: No description available.
CVE ID: CVE-2018-4785 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:30.476Z Description: No description available.
CVE ID: CVE-2018-4786 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:30.824Z Description: No description available.
CVE ID: CVE-2018-4787 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:31.192Z Description: No description available.
CVE ID: CVE-2018-4788 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:31.622Z Description: No description available.
CVE ID: CVE-2018-4789 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:32.041Z Description: No description available.
CVE ID: CVE-2018-4790 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:32.403Z Description: No description available.
CVE ID: CVE-2018-4791 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:32.788Z Description: No description available.
CVE ID: CVE-2018-4792 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:33.243Z Description: No description available.
CVE ID: CVE-2018-4793 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:33.751Z Description: No description available.
CVE ID: CVE-2018-4794 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:34.215Z Description: No description available.
CVE ID: CVE-2018-4795 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:34.610Z Description: No description available.
CVE ID: CVE-2018-4796 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:34.973Z Description: No description available.
CVE ID: CVE-2018-4797 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:35.380Z Description: No description available.
CVE ID: CVE-2018-4798 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:35.772Z Description: No description available.
CVE ID: CVE-2018-4799 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:36.191Z Description: No description available.
CVE ID: CVE-2018-4800 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:36.647Z Description: No description available.
CVE ID: CVE-2018-4801 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:37.079Z Description: No description available.
CVE ID: CVE-2018-4802 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:37.489Z Description: No description available.
CVE ID: CVE-2018-4803 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:37.873Z Description: No description available.
CVE ID: CVE-2018-4804 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:38.241Z Description: No description available.
CVE ID: CVE-2018-4805 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:38.596Z Description: No description available.
CVE ID: CVE-2018-4806 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:38.952Z Description: No description available.
CVE ID: CVE-2018-4807 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:39.339Z Description: No description available.
CVE ID: CVE-2018-4808 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:39.775Z Description: No description available.
CVE ID: CVE-2018-4809 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:40.163Z Description: No description available.
CVE ID: CVE-2018-4810 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:40.545Z Description: No description available.
CVE ID: CVE-2018-4811 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:40.946Z Description: No description available.
CVE ID: CVE-2018-4812 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:41.434Z Description: No description available.
CVE ID: CVE-2018-4813 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:41.883Z Description: No description available.
CVE ID: CVE-2018-4814 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:42.245Z Description: No description available.
CVE ID: CVE-2018-4815 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:42.605Z Description: No description available.
CVE ID: CVE-2018-4816 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:42.962Z Description: No description available.
CVE ID: CVE-2018-4817 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:43.331Z Description: No description available.
CVE ID: CVE-2018-4818 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:43.699Z Description: No description available.
CVE ID: CVE-2018-4819 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:44.067Z Description: No description available.
CVE ID: CVE-2018-4820 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:44.430Z Description: No description available.
CVE ID: CVE-2018-4821 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:44.846Z Description: No description available.
CVE ID: CVE-2018-4822 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:45.210Z Description: No description available.
CVE ID: CVE-2018-4823 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:45.599Z Description: No description available.
CVE ID: CVE-2018-4824 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:45.962Z Description: No description available.
CVE ID: CVE-2018-4825 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:46.311Z Description: No description available.
CVE ID: CVE-2018-4826 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:46.659Z Description: No description available.
CVE ID: CVE-2018-4827 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:47.041Z Description: No description available.
CVE ID: CVE-2018-4828 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:47.405Z Description: No description available.
CVE ID: CVE-2018-4829 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:47.759Z Description: No description available.
CVE ID: CVE-2018-4830 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:48.237Z Description: No description available.
CVE ID: CVE-2018-4831 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:48.607Z Description: No description available.
CVE ID: CVE-2018-4832 State: PUBLISHED Published: 2018-04-24T17:00:00 Last Updated: 2024-08-05T05:18:26.633Z Vendors: Siemens Products: OpenPCS 7 V7.1 and earlier, OpenPCS 7 V8.0, OpenPCS 7 V8.1, OpenPCS 7 V8.2, OpenPCS 7 V9.0, SIMATIC BATCH V7.1 and earlier, SIMATIC BATCH V8.0, SIMATIC BATCH V8.1, SIMATIC BATCH V8.2, SIMATIC BATCH V9.0, SIMATIC NET PC Software V14, SIMATIC NET PC Software V15, SIMATIC PCS 7 V7.1 and earlier, SIMATIC PCS 7 V8.0, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC Route Control V7.1 and earlier, SIMATIC Route Control V8.0, SIMATIC Route Control V8.1, SIMATIC Route Control V8.2, SIMATIC Route Control V9.0, SIMATIC WinCC Runtime Professional V13
MATIC Route Control V8.1, SIMATIC Route Control V8.2, SIMATIC Route Control V9.0, SIMATIC WinCC Runtime Professional V13, SIMATIC WinCC Runtime Professional V14, SIMATIC WinCC V7.2 and earlier, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SPPA-T3000 Application Server Problem Types: CWE-20 Description: A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (
TIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All version
IC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and loc
essages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-348629.pdf - http://
al.siemens.com/productcert/pdf/ssa-451445.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-348629.pdf - http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html
CVE ID: CVE-2018-4833 State: PUBLISHED Published: 2018-06-14T16:00:00 Last Updated: 2024-08-05T05:18:26.432Z Vendors: Siemens Products: RFID 181EIP, RUGGEDCOM Win, SCALANCE X-200 switch family (incl. SIPLUS NET variants), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SCALANCE X-200RNA switch family, SCALANCE X-300 switch family (incl. SIPLUS NET variants), SCALANCE X408, SCALANCE X414, SIMATIC RF182C Problem Types: CWE-122 Description: A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET va
switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemen
to a client's DHCP request. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-181018.pdf
CVE ID: CVE-2018-4834 State: PUBLISHED Published: 2018-01-24T16:00:00Z Last Updated: 2024-09-17T01:35:52.508Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Desigo PXC00-E.D V4.10, Desigo PXC00-E.D V5.00, Desigo PXC00-E.D V5.10, Desigo PXC00-E.D V6.00, Desigo PXC00/64/128-U V4.10, Desigo PXC00/64/128-U V5.00, Desigo PXC00/64/128-U V5.10, Desigo PXC00/64/128-U V6.00, Desigo PXC001-E.D V4.10, Desigo PXC001-E.D V5.00, Desigo PXC001-E.D V5.10, Desigo PXC001-E.D V6.00, Desigo PXC100-E.D V4.10, Desigo PXC100-E.D V5.00, Desigo PXC100-E.D V5.10, Desigo PXC100-E.D V6.00, Desigo PXC12-E.D V4.10, Desigo PXC12-E.D V5.00, Desigo PXC12-E
V5.00, Desigo PXC100-E.D V5.10, Desigo PXC100-E.D V6.00, Desigo PXC12-E.D V4.10, Desigo PXC12-E.D V5.00, Desigo PXC12-E.D V5.10, Desigo PXC12-E.D V6.00, Desigo PXC200-E.D V4.10, Desigo PXC200-E.D V5.00, Desigo PXC200-E.D V5.10, Desigo PXC200-E.D V6.00, Desigo PXC22-E.D V4.10, Desigo PXC22-E.D V5.00, Desigo PXC22-E.D V5.10, Desigo PXC22-E.D V6.00, Desigo PXC22.1-E.D V4.10, Desigo PXC22.1-E.D V5.00, Desigo PXC22.1-E.D V5.10, Desigo PXC22.1-E.D V6.00, Desigo PXC36.1-E.D V4.10, Desigo PXC36.1-E.D V5.00, Desigo PXC36.1-E.D V5.10, Desigo PXC36.1-E.D V6.00, Desigo PXC50-E.D V4.10, Desigo PXC50-E.D V5.00, Desigo PXC50-E.D V5.10, Desigo PXC50-E.D V6.00, Desigo PXM20-E V4.10, Desigo PXM20-E V5.00, De
, Desigo PXC50-E.D V5.00, Desigo PXC50-E.D V5.10, Desigo PXC50-E.D V6.00, Desigo PXM20-E V4.10, Desigo PXM20-E V5.00, Desigo PXM20-E V5.10, Desigo PXM20-E V6.00 Problem Types: CWE-306 Description: A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All v
module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All
XC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.17
sions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-
10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf
CVE ID: CVE-2018-4835 State: PUBLISHED Published: 2018-01-25T14:00:00Z Last Updated: 2024-09-17T02:58:06.169Z Vendors: Siemens AG Products: TeleControl Server Basic Problem Types: CWE-287 Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authentication mechanism and read limited information. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf - http://www.securityfocus.com/bid/102894 - http://www.securityfocus.com/bid/102904
CVE ID: CVE-2018-4836 State: PUBLISHED Published: 2018-01-25T14:00:00Z Last Updated: 2024-09-16T17:32:46.608Z Vendors: Siemens AG Products: TeleControl Server Basic Problem Types: CWE-287 Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf - http://www.securityfocus.com/bid/102904 - http://www.securityfocus.com/bid/102897
CVE ID: CVE-2018-4837 State: PUBLISHED Published: 2018-01-25T14:00:00Z Last Updated: 2024-09-16T16:22:25.673Z Vendors: Siemens AG Products: TeleControl Server Basic Problem Types: CWE-400 Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf - http://www.sec
ontainer: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf - http://www.securityfocus.com/bid/102819 - http://www.securityfocus.com/bid/102904
CVE ID: CVE-2018-4838 State: PUBLISHED Published: 2018-03-08T17:00:00 Last Updated: 2024-08-05T05:18:26.631Z Vendors: Siemens AG Products: EN100 Ethernet module IEC 61850 variant, EN100 Ethernet module DNP3 variant, EN100 Ethernet module PROFINET IO variant, EN100 Ethernet module Modbus TCP variant, EN100 Ethernet module IEC 104 variant Problem Types: Other Description: A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All version
l versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdf - https://www.securityfocus.com/bid/103379
CVE ID: CVE-2018-4839 State: PUBLISHED Published: 2018-03-08T17:00:00 Last Updated: 2024-08-05T05:18:26.659Z Vendors: Siemens Products: DIGSI 4, EN100 Ethernet module DNP3 variant, EN100 Ethernet module IEC 104 variant, EN100 Ethernet module IEC 61850 variant, EN100 Ethernet module Modbus TCP variant, EN100 Ethernet module PROFINET IO variant, Other SIPROTEC 4 relays, Other SIPROTEC Compact relays, SIPROTEC 4 7SD80, SIPROTEC 4 7SJ61, SIPROTEC 4 7SJ62, SIPROTEC 4 7SJ64, SIPROTEC 4 7SJ66, SIPROTEC Compact 7SJ80, SIPROTEC Compact 7SK80 Problem Types: CWE-326 Description: A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.
nerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), S
7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77). An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf
CVE ID: CVE-2018-4840 State: PUBLISHED Published: 2018-03-08T17:00:00 Last Updated: 2024-08-05T05:18:26.487Z Vendors: Siemens Products: DIGSI 4, EN100 Ethernet module DNP3 variant, EN100 Ethernet module IEC 104 variant, EN100 Ethernet module IEC 61850 variant, EN100 Ethernet module Modbus TCP variant, EN100 Ethernet module PROFINET IO variant Problem Types: CWE-306 Description: A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ether
et module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf
CVE ID: CVE-2018-4841 State: PUBLISHED Published: 2018-03-29T13:00:00Z Last Updated: 2024-09-17T03:02:01.165Z Vendors: Siemens AG Products: TIM 1531 IRC Problem Types: CWE-303 Description: A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it. Addi