Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27362 State: PUBLISHED Published: 2021-02-17T15:44:06 Last Updated: 2024-08-03T20:48:16.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.irfanview.com/plugins.htm - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/
CVE ID: CVE-2021-27363 State: PUBLISHED Published: 2021-03-07T03:55:58 Last Updated: 2024-08-03T20:48:16.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_trans
rs/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/03/06/1 - https://bugzilla.suse.com/show_bug.cgi?id=1182716 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - http://packetstormsecur
bugs-in-linux-kernel.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html - https://security.netapp.com/advisory/ntap-20210409-0001/
CVE ID: CVE-2021-27364 State: PUBLISHED Published: 2021-03-07T04:03:38 Last Updated: 2024-08-03T20:48:16.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b
ecurity-alerts/cpuoct2021.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa - https://www.openwall.com/lists/oss-security/2021/03/06/1 - https://bugzilla.suse.com/show_bug.cgi?id=1182717 - https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html - https://security.netapp.com/advisory/ntap-20210409-0001/
CVE ID: CVE-2021-27365 State: PUBLISHED Published: 2021-03-07T04:22:58 Last Updated: 2024-08-03T20:48:16.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - https
g/debian-lts-announce/2021/03/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.openwall.com/lists/oss-security/2021/03/06/1 - https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html - https://security.netapp.com/advisory/ntap-20210409-0001/ - https://bugzilla.suse.com/show_bug.cgi?id=1182715 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec98ea7070e94cc25a422ec97d1421e28d97b7ee - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/comm
t/?id=ec98ea7070e94cc25a422ec97d1421e28d97b7ee - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5
CVE ID: CVE-2021-27367 State: PUBLISHED Published: 2021-02-17T20:47:48 Last Updated: 2024-08-03T20:48:16.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/core/releases/tag/4.1.13 - https://github.com/bolt/core/pull/2371
CVE ID: CVE-2021-27368 State: PUBLISHED Published: 2021-02-22T14:38:15 Last Updated: 2024-08-03T20:48:16.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact page in Monica 2.19.1 allows stored XSS via the First Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/issues/4888 - https://github.com/monicahq/monica/pull/4543
CVE ID: CVE-2021-27369 State: PUBLISHED Published: 2021-02-22T14:37:36 Last Updated: 2024-08-03T20:48:16.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/issues/4888 - https://github.com/monicahq/monica/pull/4543
CVE ID: CVE-2021-27370 State: PUBLISHED Published: 2021-02-22T14:38:02 Last Updated: 2024-08-03T20:48:16.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/issues/4888 - https://github.com/monicahq/monica/pull/4543 - http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html - https://huntr.dev/bounties/2-other-monica/
CVE ID: CVE-2021-27371 State: PUBLISHED Published: 2021-02-22T14:37:54 Last Updated: 2024-08-03T20:48:16.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact page in Monica 2.19.1 allows stored XSS via the Description field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/issues/4888 - https://github.com/monicahq/monica/pull/4543
CVE ID: CVE-2021-27372 State: PUBLISHED Published: 2021-03-25T21:31:22 Last Updated: 2024-08-03T20:48:16.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.realtek.com/images/safe-report/RTL9601D_CVE-2021-27372.pdf
CVE ID: CVE-2021-27374 State: PUBLISHED Published: 2021-02-17T21:58:58 Last Updated: 2024-08-03T20:48:16.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation." Additional Analyst Notes: - CVE Program Container: References: - https://resources.weboffice.vertigis.com/WebOffice107/Patches/Readme_Patch_de.html#patch20210202 - https://resources.weboffice.vertigis.com/WebOffice108/Patches/Readme_Patch_de.html#patch20210207
CVE ID: CVE-2021-27375 State: PUBLISHED Published: 2021-02-18T02:55:14 Last Updated: 2024-08-03T20:48:16.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Traefik before 2.4.5 allows the loading of IFRAME elements from other domains. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/traefik/traefik/pull/7904 - https://github.com/traefik/traefik/releases/tag/v2.4.5
CVE ID: CVE-2021-27376 State: PUBLISHED Published: 2021-02-18T03:35:36 Last Updated: 2024-08-03T20:48:16.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0021.html
CVE ID: CVE-2021-27377 State: PUBLISHED Published: 2021-02-18T03:35:20 Last Updated: 2024-08-03T20:48:16.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0022.html
CVE ID: CVE-2021-27378 State: PUBLISHED Published: 2021-02-18T03:35:07 Last Updated: 2024-08-03T20:48:16.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0023.html
CVE ID: CVE-2021-27379 State: PUBLISHED Published: 2021-02-18T15:05:25 Last Updated: 2024-08-03T20:48:16.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-366.html - https://xenbits.xen.org/xsa/advisory-366.html
m Container: References: - http://xenbits.xen.org/xsa/advisory-366.html - https://xenbits.xen.org/xsa/advisory-366.html - http://www.openwall.com/lists/oss-security/2021/02/23/1 - https://www.debian.org/security/2021/dsa-4888
CVE ID: CVE-2021-27380 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:48:16.376Z Vendors: Siemens Products: Solid Edge SE2020, Solid Edge SE2021 Problem Types: CWE-787 Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12532) Additional Analyst Notes: - CVE Program Container: References: - h
n the context of the current process. (ZDI-CAN-12532) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06
CVE ID: CVE-2021-27381 State: PUBLISHED Published: 2021-03-15T17:03:31 Last Updated: 2024-08-03T20:48:16.358Z Vendors: Siemens Products: Solid Edge SE2020, Solid Edge SE2021 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534) Additional Analyst Notes: - CVE Program Container: References: - ht
the context of the current process. (ZDI-CAN-12534) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf
CVE ID: CVE-2021-27382 State: PUBLISHED Published: 2021-04-22T20:42:21 Last Updated: 2024-08-03T20:48:16.328Z Vendors: Siemens Products: Solid Edge SE2020, Solid Edge SE2021 Problem Types: CWE-121 Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13040) Additional Analyst Notes: - CVE Program Containe
to execute code in the context of the current process. (ZDI-CAN-13040) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06 - https://www.zerodayinitiative.com/advisories/ZDI-21-612/
CVE ID: CVE-2021-27383 State: PUBLISHED Published: 2021-05-12T13:18:22 Last Updated: 2024-08-03T20:48:16.589Z Vendors: Siemens Products: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) , SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) , SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option
F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option X30), SINAMICS GM150 (with option X30), SINAMICS SH150, SINAMICS SL150, SINAMICS SM120, SINAMICS SM150, SINAMICS SM150i Problem Types: CWE-770 Description: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All ver
US variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS S
INAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12
CVE ID: CVE-2021-27384 State: PUBLISHED Published: 2021-05-12T13:18:22 Last Updated: 2024-08-03T20:48:16.461Z Vendors: Siemens Products: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) , SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) , SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option
F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option X30), SINAMICS GM150 (with option X30), SINAMICS SH150, SINAMICS SL150, SINAMICS SM120, SINAMICS SM150, SINAMICS SM150i Problem Types: CWE-788 Description: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All ver
INAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
CVE ID: CVE-2021-27385 State: PUBLISHED Published: 2021-05-12T13:18:23 Last Updated: 2024-08-03T20:48:16.474Z Vendors: Siemens Products: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) , SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) , SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option
F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option X30), SINAMICS GM150 (with option X30), SINAMICS SH150, SINAMICS SL150, SINAMICS SM120, SINAMICS SM150, SINAMICS SM150i Problem Types: CWE-400 Description: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All ver
INAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). A remote attacker could send specially crafted packets to SmartVNC device layout handler on client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12
CVE ID: CVE-2021-27386 State: PUBLISHED Published: 2021-05-12T13:18:23 Last Updated: 2024-08-03T20:48:16.446Z Vendors: Siemens Products: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) , SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) , SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option
F , SIMATIC WinCC Runtime Advanced V15, SIMATIC WinCC Runtime Advanced V16, SINAMICS GH150, SINAMICS GL150 (with option X30), SINAMICS GM150 (with option X30), SINAMICS SH150, SINAMICS SL150, SINAMICS SM120, SINAMICS SM150, SINAMICS SM150i Problem Types: CWE-401 Description: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All ver
INAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the device layout handler on client side, which could result in a Denial-of-Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12 - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com
sories/icsa-21-131-12 - https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
CVE ID: CVE-2021-27387 State: PUBLISHED Published: 2021-06-08T19:47:16 Last Updated: 2024-08-03T20:48:16.412Z Vendors: Siemens Products: Simcenter Femap 2020.2, Simcenter Femap 2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27399. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-
E-2021-27399. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12819) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-133038.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-780/