Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-5399 State: PUBLISHED Published: 2014-08-28T01:00:00 Last Updated: 2025-10-31T23:17:37.919Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Schneider Electric Products: Wonderware Information Server Portal Problem Types: CWE-89 Description: SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json
CVE ID: CVE-2014-5400 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2025-11-03T18:26:56.284Z Severity: N/A (CVSS 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C) Vendors: Hospira Products: MedNet Problem Types: CWE-260 Description: The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
CVE ID: CVE-2014-5401 State: PUBLISHED Published: 2019-03-26T16:21:54 Last Updated: 2025-11-03T18:20:04.649Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Hospira Products: MedNet Problem Types: CWE-94 Description: Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03 -
Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
CVE ID: CVE-2014-5402 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-5403 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2025-11-03T18:22:39.434Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:C/I:N/A:N) Vendors: Hospira Products: MedNet Problem Types: CWE-321 Description: Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
CVE ID: CVE-2014-5404 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-5405 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2025-11-03T18:25:50.764Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Hospira Products: MedNet Problem Types: CWE-259 Description: Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
CVE ID: CVE-2014-5406 State: PUBLISHED Published: 2015-07-06T19:10:00 Last Updated: 2025-11-03T18:34:36.324Z Severity: N/A (CVSS 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C) Vendors: Hospira Products: LifeCare PCA Infusion System Problem Types: CWE-345 Description: The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets on the (a) TELNET, (b) HTTP, (c) HTTPS, or (d) UPNP port. NOTE: this issue might overlap CVE-2015-3459. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.g
s issue might overlap CVE-2015-3459. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-125-01 - http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm - https://xs-sniper.com/blog/2015/06/08/hospira-plum-a-infusion-pump-vulnerabilities/ - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-125-01.json
CVE ID: CVE-2014-5407 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2025-11-03T18:52:21.206Z Severity: N/A (CVSS 4.1 AV:L/AC:M/Au:S/C:P/I:P/A:P) Vendors: Schneider Electric Products: VAMPSET Problem Types: CWE-121 Description: Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service (application halt) via a malformed (1) setting file or (2) disturbance recording file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-254-01 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-01.json - http://www.sc
sa-14-254-01 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-01.json - http://www.schneider-electric.com/products/ww/en/2300-ied-user-software/2320-vamp-user-software/62050-vamp-software/
CVE ID: CVE-2014-5408 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2025-11-03T18:50:14.150Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Nordex Products: Nordex Control 2 (NC2) SCADA Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-303-01 - http://www.securityfocus.com/bid/70851 - https://github.com/cisagov/CSAF/blob/develop/cs
ics-advisories/icsa-14-303-01 - http://www.securityfocus.com/bid/70851 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-303-01.json
CVE ID: CVE-2014-5409 State: PUBLISHED Published: 2015-03-14T01:00:00 Last Updated: 2025-11-03T18:58:26.900Z Severity: N/A (CVSS 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P) Vendors: GE Products: Hydran M2, containing the 17046 Ethernet option Problem Types: CWE-343 Description: The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-041-02 - http://libraries.ge.com/download?fileid
: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-041-02 - http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-041-02.json
CVE ID: CVE-2014-5410 State: PUBLISHED Published: 2014-10-03T18:00:00 Last Updated: 2025-11-04T22:30:19.113Z Severity: N/A (CVSS 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C) Vendors: Rockwell Automation Products: Allen-Bradley MicroLogix 1400 Problem Types: CWE-20 Description: The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line. Additional Analyst Notes: - CVE Program Container: References: - https://rockwellautomation.custhelp.com/app/answers/deta
dditional Analyst Notes: - CVE Program Container: References: - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/620295 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-254-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-02.json
CVE ID: CVE-2014-5411 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2025-11-04T22:53:17.900Z Severity: N/A (CVSS 4.9 AV:N/AC:H/Au:S/C:N/I:N/A:C) Vendors: Schneider Electric Products: ClearSCADA, SCADA Expert ClearSCADA Problem Types: CWE-79 Description: Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/20
isa.gov/news-events/ics-advisories/icsa-14-259-01a - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
CVE ID: CVE-2014-5412 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2025-11-04T22:56:12.970Z Severity: N/A (CVSS 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N) Vendors: Schneider Electric Products: ClearSCADA, SCADA Expert ClearSCADA Problem Types: CWE-287 Description: Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
CVE ID: CVE-2014-5413 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2025-11-04T22:59:00.297Z Severity: N/A (CVSS 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N) Vendors: Schneider Electric Products: ClearSCADA, SCADA Expert ClearSCADA Problem Types: CWE-310 Description: Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT
s://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
CVE ID: CVE-2014-5414 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2025-11-04T23:09:34.639Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Beckhoff Products: Embedded PC Images, TwinCAT Components featuring Automation Device Specification (ADS) communication Problem Types: CWE-307 Description: Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93349
te-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93349 - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json
CVE ID: CVE-2014-5415 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2025-11-04T23:12:23.266Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Beckhoff Products: Embedded PC Images, TwinCAT Components featuring Automation Device Specification (ADS) communication Problem Types: CWE-749 Description: Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
e, or (3) TELNET service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93349 - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json
CVE ID: CVE-2014-5416 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-5417 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2025-11-04T23:19:36.651Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Meinberg Radio Clocks Products: LANTIME M-Series Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70847 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-01 - http://www.meinbergglobal.com/english/news/meinberg-security-advisor
isa.gov/news-events/ics-advisories/icsa-14-275-01 - http://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-1404-lantime-web-interface-cross-site-scripting-vulnerability.htm - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-275-01.json - http://news.meinberg.de/259
CVE ID: CVE-2014-5418 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-11-04T23:30:32.557Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:N/A:P) Vendors: GE Products: Multilink ML800/1200/1600/2400, ML810/3000/3100 series switch Problem Types: CWE-400 Description: GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a - http://www.gedi
- CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a - http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json
CVE ID: CVE-2014-5419 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-11-04T23:32:07.026Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: GE Products: Multilink ML800/1200/1600/2400, ML810/3000/3100 series switch Problem Types: CWE-321 Description: GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of network traffic by reading this key from a firmware image and then sniffing the network. Additional A
eartext content of network traffic by reading this key from a firmware image and then sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a - http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json
CVE ID: CVE-2014-5420 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T11:41:49.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for remote authenticated users to obtain application-file access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01
CVE ID: CVE-2014-5421 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T11:41:49.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01
CVE ID: CVE-2014-5422 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T11:41:49.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01
CVE ID: CVE-2014-5423 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T11:41:49.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 allows local users to obtain potentially sensitive information by reading a temporary (1) debugging file or (2) developer file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01
CVE ID: CVE-2014-5424 State: PUBLISHED Published: 2014-11-14T00:00:00 Last Updated: 2024-08-06T11:41:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-294-01
CVE ID: CVE-2014-5425 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T11:41:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and master entry consumption) via a null DNP3 header. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-289-01
CVE ID: CVE-2014-5426 State: PUBLISHED Published: 2014-11-27T15:00:00 Last Updated: 2024-08-06T11:41:49.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service (unhandled exception and DNP3 process crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.opcsupport.com/link/portal/4164/4590/Article/3004/SECURITY-NOTIFICATION-OPC-Server-for-SCADA-DNP3-SN-2014-10-14-01 - https://ics-cert.us-cert.gov/advisories/ICSA-14-329-01
CVE ID: CVE-2014-5427 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T11:41:49.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to read password hashes via a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02
CVE ID: CVE-2014-5428 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T11:41:49.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to execute arbitrary code by uploading a shell script. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-
t. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02
CVE ID: CVE-2014-5429 State: PUBLISHED Published: 2014-12-06T15:00:00 Last Updated: 2024-08-06T11:41:49.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows remote attackers to cause a denial of service (CPU consumption) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-303-02
CVE ID: CVE-2014-5430 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T11:41:49.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local users to gain privileges via a Trojan horse DLL that is accessed as a result of incorrect DLL configuration by an optional installation program. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-308-01
CVE ID: CVE-2014-5431 State: PUBLISHED Published: 2019-03-26T15:37:49 Last Updated: 2024-08-06T11:41:49.207Z Vendors: Baxter Products: SIGMA Spectrum Infusion System Problem Types: CWE-259 Description: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password may allow an attacker with physical access to the device to access management functions to make unauthorized configuration changes to biomedical settings such as turn on and off wireless connectio
t functions to make unauthorized configuration changes to biomedical settings such as turn on and off wireless connections and the phase-complete audible alarm that indicates the end of an infusion phase. Baxter has released a new version of the SIGMA Spectrum Infusion System, version 8, which incorporates hardware and software changes. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01