Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-27353 State: PUBLISHED Published: 2025-02-24T14:49:25.170Z Last Updated: 2025-02-24T15:56:08.918Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bob Products: Namaste! LMS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bob Namaste! LMS allows Cross Site Request Forgery. This issue affects Namaste! LMS: from n/a through 2.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/namaste-lms/vulnerability/wordpress-namaste-lms-plugin-2-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-27354 State: PUBLISHED Published: 2025-04-17T15:47:53.098Z Last Updated: 2025-04-17T18:22:55.337Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: phil88530 Products: Simple Email Subscriber Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phil88530 Simple Email Subscriber allows Reflected XSS. This issue affects Simple Email Subscriber: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-email-subscriber/vulnerability/wordpress-simple-email-subscriber-plugin-2-3-refle
k.com/database/wordpress/plugin/simple-email-subscriber/vulnerability/wordpress-simple-email-subscriber-plugin-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-27355 State: PUBLISHED Published: 2025-02-24T14:49:25.894Z Last Updated: 2025-02-24T15:55:42.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Nicolas GRILLET Products: Woocommerce – Loi Hamon Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nicolas GRILLET Woocommerce – Loi Hamon allows Stored XSS. This issue affects Woocommerce – Loi Hamon: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/loi-hamon/vulnerability/wordpress-woocommerce-loi-hamon-plugin-1-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-27356 State: PUBLISHED Published: 2025-02-24T14:49:26.583Z Last Updated: 2025-02-24T15:27:48.704Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Hardik Products: Sticky Header On Scroll Problem Types: CWE-862 Description: Missing Authorization vulnerability in Hardik Sticky Header On Scroll allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sticky Header On Scroll: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sticky-header-on-scroll/vulnerability/wordpress-sticky-header-on-scroll-plugin-1-0-broken-access-contro
wordpress/plugin/sticky-header-on-scroll/vulnerability/wordpress-sticky-header-on-scroll-plugin-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-27357 State: PUBLISHED Published: 2025-02-24T14:49:27.292Z Last Updated: 2025-02-24T16:31:14.156Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Musa AVCI Products: Önceki Yazı Link Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Musa AVCI Önceki Yazı Link allows Cross Site Request Forgery. This issue affects Önceki Yazı Link: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/onceki-yazi-linki/vulnerability/wordpress-oenceki-yazi-link-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-27358 State: PUBLISHED Published: 2025-07-04T08:42:10.238Z Last Updated: 2025-07-08T17:39:00.258Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: N-Media Products: Frontend File Manager Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager allows Code Injection.This issue affects Frontend File Manager: from n/a through 23.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nmedia-user-file-uploader/vulnerability/wordpress-frontend-file-manager-plugin-23-2-content-injection-
/wordpress/plugin/nmedia-user-file-uploader/vulnerability/wordpress-frontend-file-manager-plugin-23-2-content-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-27359 State: PUBLISHED Published: 2025-06-06T12:54:36.408Z Last Updated: 2025-06-06T14:39:58.330Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Seerox Products: WP Media File Type Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Media File Type Manager allows Cross Site Request Forgery. This issue affects WP Media File Type Manager: from n/a through 2.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-media-file-type-manager/vulnerability/wordpress-wp-media-file-type-manager-plugin-2-3-0-cross-site-request-forgery-
n/wp-media-file-type-manager/vulnerability/wordpress-wp-media-file-type-manager-plugin-2-3-0-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-27360 State: PUBLISHED Published: 2025-06-06T12:54:35.952Z Last Updated: 2025-06-06T14:52:15.541Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Corner Products: Quick Event Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Corner Quick Event Calendar allows Cross Site Request Forgery. This issue affects Quick Event Calendar: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quick-event-calendar/vulnerability/wordpress-quick-event-calendar-1-4-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-27361 State: PUBLISHED Published: 2025-06-27T11:52:45.537Z Last Updated: 2025-06-27T13:41:51.353Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: thhake Products: Photo Express for Google Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google allows Reflected XSS. This issue affects Photo Express for Google: from n/a through 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/photo-express-for-google/vulnerability/wordpress-photo-express-for-google-plugin-0-3-2-re
.com/database/wordpress/plugin/photo-express-for-google/vulnerability/wordpress-photo-express-for-google-plugin-0-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-27362 State: PUBLISHED Published: 2025-06-09T15:56:53.575Z Last Updated: 2025-06-10T13:34:53.305Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: BZOTheme Products: Petito Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Petito allows PHP Local File Inclusion. This issue affects Petito: from n/a through 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/bw-petito/vulnerability/wordpress-petito-1-6-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-27363 State: PUBLISHED Published: 2025-03-11T13:28:31.705Z Last Updated: 2025-10-21T22:55:25.379Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: FreeType Products: FreeType Problem Types: Out-of-bounds Write (CWE-787) Description: An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allo
le code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2025-27363
CVE ID: CVE-2025-27364 State: PUBLISHED Published: 2025-02-24T00:00:00.000Z Last Updated: 2025-02-24T19:22:10.867Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MITRE Products: Caldera Problem Types: CWE-78 Description: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the g
ver API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mitre/caldera/releases - https://github.com/mitre/caldera/security - https://medium.com/@mitrecaldera/mitre-caldera-security-advisory-remote-code-execution-cve-2025-27364-5f679e2e2a0e - https://github.com/mitre/caldera/commit/35bc06e42e19fe7efbc008999b9f993b1b7109c0 - https://github.com/mitre/caldera/pull/3131/commits/61de40f92a595bed462372a5e676c2e5a32d1050 - https://github.com/mitre/caldera/pull/3129
CVE ID: CVE-2025-27365 State: PUBLISHED Published: 2025-05-01T21:24:24.884Z Last Updated: 2025-08-28T14:59:58.108Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Operator Problem Types: CWE-416 Description: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7232272
CVE ID: CVE-2025-27367 State: PUBLISHED Published: 2025-07-08T18:42:25.925Z Last Updated: 2025-08-24T11:23:31.695Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-602 Description: IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
required fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239155
CVE ID: CVE-2025-27368 State: PUBLISHED Published: 2025-11-12T19:11:10.308Z Last Updated: 2025-11-12T21:03:57.566Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: OpenPages Problem Types: CWE-497 Description: IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/725023
to view. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7250238
CVE ID: CVE-2025-27369 State: PUBLISHED Published: 2025-07-08T18:43:15.373Z Last Updated: 2025-08-24T11:22:57.543Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-497 Description: IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for the administration of OpenPages. An authenticated user is able to obtain certain information about system configuration and internal state which is only intended for administrators of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
state which is only intended for administrators of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239155
CVE ID: CVE-2025-27370 State: PUBLISHED Published: 2025-03-03T00:00:00.000Z Last Updated: 2025-04-25T14:43:40.581Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: OpenID Products: OpenID Connect Problem Types: CWE-305 Description: OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate t
f other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf - https://openid.net/notice-of-a-security-vulnerability/ - https://talks.secworkshop.events/osw2025/talk/R8D9BS/ - https://github.com/OWASP/ASVS/issues/2678 - https://eprint.iacr.org/2025/629
CVE ID: CVE-2025-27371 State: PUBLISHED Published: 2025-03-03T00:00:00.000Z Last Updated: 2025-04-25T14:42:06.366Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: IETF Products: RFC 7523 Problem Types: CWE-305 Description: In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 9101 (JAR), and RFC 9126 (PAR). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openid.net/wp-content/uploads/2025/01/OIDF-R
). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf - https://openid.net/notice-of-a-security-vulnerability/ - https://talks.secworkshop.events/osw2025/talk/R8D9BS/ - https://github.com/OWASP/ASVS/issues/2678 - https://eprint.iacr.org/2025/629
CVE ID: CVE-2025-27374 State: PUBLISHED Published: 2025-11-04T00:00:00.000Z Last Updated: 2025-11-04T21:28:56.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27374/
CVE ID: CVE-2025-27387 State: PUBLISHED Published: 2025-06-23T09:28:08.244Z Last Updated: 2025-06-23T12:14:46.248Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: OPPO Products: ColorOS Problem Types: CWE-200 Description: OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1937080145974403072https://
CVE ID: CVE-2025-27388 State: PUBLISHED Published: 2025-08-14T07:15:10.875Z Last Updated: 2025-08-14T19:37:41.298Z Vendors: OPPO Products: OPPO HEALTH APP Problem Types: CWE-20 Description: Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1955879800426209280
CVE ID: CVE-2025-27391 State: PUBLISHED Published: 2025-04-09T14:42:32.504Z Last Updated: 2025-04-09T17:02:46.727Z Vendors: Apache Software Foundation Products: Apache ActiveMQ Artemis Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis. All the values of the broker properties are logged when the org.apache.activemq.artemis.core.config.impl.ConfigurationImpl logger has the debug level enabled. This issue affects Apache ActiveMQ Artemis: from 1.5.1 before 2.40.0. It can be mitigated by restricting log access to only trusted users. Users are recommended to upgrade to version 2.40.0, which fixes the issue. Additional Anal
access to only trusted users. Users are recommended to upgrade to version 2.40.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/25p96cvzl1mkt29lwm2d8knklkoqolps
CVE ID: CVE-2025-27392 State: PUBLISHED Published: 2025-03-11T09:48:22.215Z Last Updated: 2025-03-11T14:16:45.085Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-0
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27393 State: PUBLISHED Published: 2025-03-11T09:48:23.554Z Last Updated: 2025-03-11T14:14:23.130Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27394 State: PUBLISHED Published: 2025-03-11T09:48:24.841Z Last Updated: 2025-03-11T13:42:19.485Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27395 State: PUBLISHED Published: 2025-03-11T09:48:26.122Z Last Updated: 2025-03-11T13:38:37.471Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-22 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.co
d write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27396 State: PUBLISHED Published: 2025-03-11T09:48:27.422Z Last Updated: 2025-03-11T13:37:41.490Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-273 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcer
privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27397 State: PUBLISHED Published: 2025-03-11T09:48:28.712Z Last Updated: 2025-03-11T13:35:39.175Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-22 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with 'log' . Additional Analyst Notes: - CISA
arbitrary files in the filesystem, if and only if the malicious path ends with 'log' . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html
CVE ID: CVE-2025-27398 State: PUBLISHED Published: 2025-03-11T09:48:30.045Z Last Updated: 2025-03-11T13:30:28.112Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
f binaries that are already present on the filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-075201.html