Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33282 State: PUBLISHED Published: 2023-04-04T04:46:36.422Z Last Updated: 2025-02-11T14:22:22.255Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-680 Description: Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33283 State: PUBLISHED Published: 2023-01-06T05:02:25.629Z Last Updated: 2025-04-09T15:07:56.560Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33284 State: PUBLISHED Published: 2023-01-06T05:02:26.918Z Last Updated: 2025-04-09T15:05:39.836Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33285 State: PUBLISHED Published: 2023-01-06T05:02:28.591Z Last Updated: 2025-04-09T15:00:21.443Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33286 State: PUBLISHED Published: 2023-01-06T05:02:30.303Z Last Updated: 2025-04-09T14:57:22.026Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33287 State: PUBLISHED Published: 2023-04-04T04:46:37.808Z Last Updated: 2024-08-03T08:01:20.515Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33288 State: PUBLISHED Published: 2023-04-04T04:46:39.327Z Last Updated: 2024-08-03T08:01:20.525Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33289 State: PUBLISHED Published: 2023-04-04T04:46:40.850Z Last Updated: 2024-08-03T08:01:20.531Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33290 State: PUBLISHED Published: 2023-01-06T05:02:31.585Z Last Updated: 2025-04-09T14:56:08.844Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33291 State: PUBLISHED Published: 2023-04-04T04:46:42.180Z Last Updated: 2024-08-03T08:01:20.564Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33292 State: PUBLISHED Published: 2023-05-02T05:08:45.337Z Last Updated: 2024-08-03T08:01:20.553Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin
CVE ID: CVE-2022-33294 State: PUBLISHED Published: 2023-04-04T04:46:43.701Z Last Updated: 2024-08-03T08:01:20.511Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33295 State: PUBLISHED Published: 2023-04-04T04:46:44.921Z Last Updated: 2024-08-03T08:01:20.531Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33296 State: PUBLISHED Published: 2023-04-04T04:46:46.371Z Last Updated: 2024-08-03T08:01:20.522Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-680 Description: Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33297 State: PUBLISHED Published: 2023-04-04T04:46:47.718Z Last Updated: 2024-08-03T08:01:20.515Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure due to buffer overread in Linux sensors Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33298 State: PUBLISHED Published: 2023-04-04T04:46:49.005Z Last Updated: 2024-08-03T08:01:20.586Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption due to use after free in Modem while modem initialization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33299 State: PUBLISHED Published: 2023-01-06T05:02:32.860Z Last Updated: 2025-04-09T14:54:56.269Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33300 State: PUBLISHED Published: 2023-01-06T05:02:34.235Z Last Updated: 2025-04-09T14:53:05.640Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: n/a Description: Memory corruption in Automotive Android OS due to improper input validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE ID: CVE-2022-33301 State: PUBLISHED Published: 2023-04-04T04:46:50.275Z Last Updated: 2024-08-03T08:01:20.587Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-704 Description: Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33302 State: PUBLISHED Published: 2023-04-04T04:46:52.080Z Last Updated: 2024-08-03T08:01:20.540Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin
CVE ID: CVE-2022-33303 State: PUBLISHED Published: 2023-06-06T07:38:49.031Z Last Updated: 2024-08-03T08:01:20.523Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-400 Description: Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33304 State: PUBLISHED Published: 2023-05-02T05:08:46.426Z Last Updated: 2024-08-03T08:01:20.601Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin
CVE ID: CVE-2022-33305 State: PUBLISHED Published: 2023-05-02T05:08:47.586Z Last Updated: 2024-08-03T08:01:20.537Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin
CVE ID: CVE-2022-33306 State: PUBLISHED Published: 2023-02-09T06:58:46.264Z Last Updated: 2024-08-03T08:01:20.674Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin
CVE ID: CVE-2022-33307 State: PUBLISHED Published: 2023-06-06T07:38:50.743Z Last Updated: 2024-08-03T08:01:20.479Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin
CVE ID: CVE-2022-33309 State: PUBLISHED Published: 2023-03-07T04:43:42.523Z Last Updated: 2024-08-03T08:01:20.551Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin
CVE ID: CVE-2022-33310 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:49.156Z Description: No description available.
CVE ID: CVE-2022-33311 State: PUBLISHED Published: 2022-08-18T07:14:48 Last Updated: 2024-08-03T08:01:20.570Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-33312 State: PUBLISHED Published: 2022-06-30T19:05:28.653Z Last Updated: 2025-04-15T18:59:53.552Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_cert_file/` API is affected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
ected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1572
CVE ID: CVE-2022-33313 State: PUBLISHED Published: 2022-06-30T19:05:34.567Z Last Updated: 2025-04-15T18:59:46.613Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
is affected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1572
CVE ID: CVE-2022-33314 State: PUBLISHED Published: 2022-06-30T19:05:40.156Z Last Updated: 2025-04-15T18:59:39.287Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_sdk_file/` API is affected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
cted by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1572
CVE ID: CVE-2022-33315 State: PUBLISHED Published: 2022-07-20T16:55:13 Last Updated: 2024-08-03T08:01:20.500Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Deserialization of Untrusted Data Description: Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/
nal Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf - https://jvn.jp/vu/JVNVU96480474/index.html
CVE ID: CVE-2022-33316 State: PUBLISHED Published: 2022-07-20T16:51:27 Last Updated: 2024-08-03T08:09:21.142Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Deserialization of Untrusted Data Description: Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/
CVE ID: CVE-2022-33317 State: PUBLISHED Published: 2022-07-20T16:53:59 Last Updated: 2024-08-03T08:09:21.143Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Inclusion of Functionality from Untrusted Control Sphere Description: Inclusion of Functionality from Untrusted Control Sphere vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious script codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mi
n file including malicious script codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf - https://jvn.jp/vu/JVNVU96480474/index.html
CVE ID: CVE-2022-33318 State: PUBLISHED Published: 2022-07-20T16:57:38 Last Updated: 2024-08-03T08:09:21.263Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Deserialization of Untrusted Data Description: Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64 server. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf
es: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf - https://jvn.jp/vu/JVNVU96480474/index.html
CVE ID: CVE-2022-33319 State: PUBLISHED Published: 2022-07-20T16:58:49 Last Updated: 2024-08-03T08:09:21.355Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Out-of-bounds Read Description: Out-of-bounds Read vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service (DoS) condition by sending specially crafted packets to the GENESIS64 server. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-
nalyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf - https://jvn.jp/vu/JVNVU96480474/index.html
CVE ID: CVE-2022-33320 State: PUBLISHED Published: 2022-07-20T16:56:24 Last Updated: 2024-08-03T08:09:21.319Z Vendors: n/a Products: ICONICS GENESIS64; Mitsubishi Electric MC Works64 Problem Types: Deserialization of Untrusted Data Description: Deserialization of Untrusted Data vulnerability in ICONICS GENESIS64 versions 10.97.1 and prior and Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a project configuration file including malicious XML codes. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/p
tional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf - https://jvn.jp/vu/JVNVU96480474/index.html
CVE ID: CVE-2022-33321 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:26:32.368Z Vendors: Mitsubishi Electric Corporation Products: PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M, PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-M, PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-M, PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-Y, PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-Y, PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-Y, HEMS adapter GT-HEM1, HEMS adapter GT-HEM2, HEMS adapter GT-HEM3, HEMS adapter GT-HEM3-M, HEMS adapter P-01HMA, HEMS adapter P-HM02WA, HEMS adapter P-HM03WA, HEMS adapter VEZ-HM01WA , HEMS adapter
er GT-HEM3-M, HEMS adapter P-01HMA, HEMS adapter P-HM02WA, HEMS adapter P-HM03WA, HEMS adapter VEZ-HM01WA , HEMS adapter HM-01A-CS, HEMS adapter HM-01A-EX, HEMS adapter HM-01A-VEH, HEMS adapter HM-02A-CS, HEMS adapter HM-02A-REF, HEMS adapter HM-02A-VEH, HEMS adapter HM-WF001, HEMS adapter HM-W002-AC, HEMS adapter HM-W002-ACB, Wi-Fi Interface MAC-884IF, Wi-Fi Interface MAC-888IF, Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80E2(S), Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/90E3(S), Induction hob CS-PT31HNWSR-H, Induction hob G32MS-H, Induction hob G32M-H, Mitsubishi Electric HEMS Energy Measurement Unit HM-EM02, Mitsubishi Electric HEMS Energy Measurement Unit HM-EM03-W, Wi-Fi Int