Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://lists.apache.org/thread.html/r7836bbdbe95c99d4d725199f0c169927d4e87ba57e4beeeb699c097a%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r5b1ad61552591b747cd31b3a908d5ff2e8f2a8a6847583dd6b7b1ee7%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r88e2b91560c065ed67e62adf8f401c417e4d70256d11ea447215a70c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rfd173eac20d5e5f581c8984b685c836dafea8eb2f7ff85f617704cf1%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ref2c8a0cbb3b8271e5b9a06457ba78ad2028128627186531730f50ef%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.h
1e5b9a06457ba78ad2028128627186531730f50ef%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r255ed239e65d0596812362adc474bee96caf7ba042c7ad2f3c62cec7%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rf803b65b4a57589d79cf2e83d8ece0539018d32864f932f63c972844%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd302ddb501fa02c5119120e5fc21df9a1c00e221c490edbe2d7ad365%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/re1ea144e91f03175d661b2d3e97c7d74b912e019613fa90419cf63f4%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r866288c2ada00ce148b7307cdf869
3fa90419cf63f4%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r866288c2ada00ce148b7307cdf869f15f24302b3eb2128af33830997%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rff8859c0d06b1688344b39097f9685c43b461cf2bc41f60f001704e9%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r4a7e4e23bd84ac24abf30ab5d5edf989c02b555e1eca6a2f28636692%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9c30b7fca4baedebcb46d6e0f90071b30cc4a0e074164d50122ec5ec%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r281882fdf9ea89aac02fd2f92786693a956aac2ce9840cce87c7df6b%40%3Ccommi
pache.org%3E - https://lists.apache.org/thread.html/r281882fdf9ea89aac02fd2f92786693a956aac2ce9840cce87c7df6b%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r5030cd8ea5df1e64cf6a7b633eff145992fbca03e8bfc687cd2427ab%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r3ea4918d20d0c1fa26cac74cc7cda001d8990bc43473d062867ef70d%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ref3943adbc3a8813aee0e3a9dd919bacbb27f626be030a3c6d6c7f83%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r9addb580456807cd11d6f0c6b6373b7d7161d06d2278866c30c7febb%40%3Ccommits.zookeeper.apache.org%3E - https:
.org/thread.html/r9addb580456807cd11d6f0c6b6373b7d7161d06d2278866c30c7febb%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r4f4a14d6a608db447b725ec2e96c26ac9664d83cd879aa21e2cfeb24%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rf9f8bcc4ca8d2788f77455ff594468404732a4497baebe319043f4d5%40%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r5a0b1f0b1c3bcd66f5177fbd6f6de2d0f8cae24a13ab2669f274251a%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.
66f5177fbd6f6de2d0f8cae24a13ab2669f274251a%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r69b23a94d4ae45394cabae012dd1f4a963996869c44c478eb1c61082%40%3Ccommits.zookeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html - https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f%40%3Cdev.flink.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/ - https://www.oracle.co
chives/list/package-announce%40lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://github.com/netty/netty/issues/6168 - https://github.com/netty/netty/pull/9924 - https://github.com/netty/netty/compare/netty-4.1.45.Final...netty-4.1.46.Final - https://lists.apache.org/thread.html/r31424427cc6d7db46beac481bdeed9a823fc20bb1b9deede38557f71%40%3Cnotifications.zookeeper.apache.org%3E - https://security.netapp.com/advisory/ntap-20201223-0001/ - https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r7790b9d
a4c7c2eb83ad2d6c21c74569acda5233f9f1ec%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2%40%3Ccommits.pulsar.apache.org%3E - https://www.debian.org/security/2021/dsa-4885 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-11613 State: PUBLISHED Published: 2020-06-11T16:47:05 Last Updated: 2024-08-04T11:35:13.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default, the Authenticated Users group has Modify permissions to the installation folder. Because of this, any user on the system can replace binaries or plant malicious DLLs to obtain elevated, or different, privileges, depending on the context of the user that runs the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/C
he user that runs the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Crytilis/mids-reborn-hero-designer/releases - https://www.doyler.net/security-not-included/mids-reborn-vulnerabilities
CVE ID: CVE-2020-11614 State: PUBLISHED Published: 2020-06-11T16:49:26 Last Updated: 2024-08-04T11:35:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform file integrity validation for files after download. An attacker can perform a man-in-the-middle attack against this connection and replace executable files with malicious versions, which the operating system then executes under the context of the user running Hero Designer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Crytilis/mids
running Hero Designer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Crytilis/mids-reborn-hero-designer/releases - https://www.doyler.net/security-not-included/mids-reborn-vulnerabilities
CVE ID: CVE-2020-11615 State: PUBLISHED Published: 2020-10-29T03:35:33 Last Updated: 2024-08-04T11:35:13.342Z Vendors: NVIDIA Products: NVIDIA DGX Servers Problem Types: information disclosure Description: NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which it uses a hard-coded RC4 cipher key, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5010
CVE ID: CVE-2020-11616 State: PUBLISHED Published: 2020-10-29T03:35:33 Last Updated: 2024-08-04T11:35:13.619Z Vendors: NVIDIA Products: NVIDIA DGX Servers Problem Types: information disclosure Description: NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5010
CVE ID: CVE-2020-11617 State: PUBLISHED Published: 2020-08-31T14:20:55 Last Updated: 2024-08-04T11:35:13.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client. Additional Analyst Notes: - CVE Program Container: References: - https://decoded.avast.io/vladislaviliushin/flaws-in-dvb-t2-set-top-boxes-exposed/
CVE ID: CVE-2020-11618 State: PUBLISHED Published: 2020-08-31T14:22:17 Last Updated: 2024-08-04T11:35:13.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the TELNET protocol. Additional Analyst Notes: - CVE Program Container: References: - https://decoded.avast.io/vladislaviliushin/flaws-in-dvb-t2-set-top-boxes-exposed/
CVE ID: CVE-2020-11619 State: PUBLISHED Published: 2020-04-07T22:14:09 Last Updated: 2024-08-04T11:35:13.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/FasterXML/ja
you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/FasterXML/jackson-databind/issues/2680 - https://security.netapp.com/advisory/ntap-20200511-0004/ - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2020-11620 State: PUBLISHED Published: 2020-04-07T22:14:18 Last Updated: 2024-08-04T11:35:13.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-2020
w-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20200511-0004/ - https://github.com/FasterXML/jackson-databind/issues/2682 - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2020-11622 State: PUBLISHED Published: 2020-06-10T19:58:16 Last Updated: 2024-08-04T11:35:13.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368.*, 4.21.4-FCRFX.*, 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1 Router code in a scenario where TCP MSS options are configured. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices - https://www.arista.com/en/support/advisories-no
er: References: - https://www.arista.com/en/support/advisories-notices - https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49
CVE ID: CVE-2020-11623 State: PUBLISHED Published: 2020-07-23T20:00:21 Last Updated: 2024-08-04T11:35:13.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as the camera's bootloader. Successful exploitation could compromise confidentiality, integrity, and availability of the affected system. It could even render the device inoperable. Additional Analyst Notes: - CVE Program Container: Refer
he affected system. It could even render the device inoperable. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/avertx-ip-cameras-vulnerabilities/
CVE ID: CVE-2020-11624 State: PUBLISHED Published: 2020-07-23T20:02:05 Last Updated: 2024-08-04T11:35:13.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change the default password for the admin account. They only show a pop-up window suggesting a change but there's no enforcement. An administrator can click Cancel and proceed to use the device without changing the password. Additionally, they disclose the default username within the login.js script. Since many attacks for IoT devices, inc
rd. Additionally, they disclose the default username within the login.js script. Since many attacks for IoT devices, including malware and exploits, are based on the usage of default credentials, it makes these cameras an easy target for malicious actors. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/avertx-ip-cameras-vulnerabilities/
CVE ID: CVE-2020-11625 State: PUBLISHED Published: 2020-07-23T20:03:53 Last Updated: 2024-08-04T11:35:13.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate whether a submitted username is valid or not, they make it easier to identify legitimate usernames. If a login request is sent to ISAPI/Security/sessionLogin/capabilities using a username that exists, it will return the value of the salt g
is sent to ISAPI/Security/sessionLogin/capabilities using a username that exists, it will return the value of the salt given to that username, even if the password is incorrect. However, if a login request is sent using a username that is not present in the database, it will return an empty salt value. This allows attackers to enumerate legitimate usernames, facilitating brute-force attacks. NOTE: this is different from CVE-2020-7057. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/avertx-ip-cameras-vulnerabilities/
CVE ID: CVE-2020-11626 State: PUBLISHED Published: 2020-04-07T23:34:50 Last Updated: 2024-08-04T11:35:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting (XSS) vulnerabilities have been found in the Public Web and the Certificate/CRL download servlets. Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/primekey-announcements
CVE ID: CVE-2020-11627 State: PUBLISHED Published: 2020-04-07T23:34:39 Last Updated: 2024-08-04T11:35:13.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. A Cross Site Request Forgery (CSRF) issue has been found in the CA UI. Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/primekey-announcements
CVE ID: CVE-2020-11628 State: PUBLISHED Published: 2020-04-07T23:34:29 Last Updated: 2024-08-04T11:35:13.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to support restriction of available remote protocols (CMP, ACME, REST, etc.) through the system configuration. These restrictions can be bypassed by modifying the URI string from a client. (EJBCA's internal access control restrictions are still in place, and each respective protocol must be configured to allow for enrollment.) Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/posts/ejbca-sec
ent.) Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/posts/ejbca-security-advisory-protocol-access-control-bypass
CVE ID: CVE-2020-11629 State: PUBLISHED Published: 2020-04-07T23:34:20 Last Updated: 2024-08-04T11:35:13.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, which allows administrators to upload external linters to validate certificates, is supposed to save uploaded test certificates to the server. An attacker who has gained access to the CA UI could exploit this to upload malicious scripts to the server. (Risks associated with this issue alone are negligible unless a malicious user already has gained access to the CA UI through other means, as a trusted user is al
e negligible unless a malicious user already has gained access to the CA UI through other means, as a trusted user is already trusted to upload scripts by virtue of having access to the validator.) Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/primekey-announcements
CVE ID: CVE-2020-11630 State: PUBLISHED Published: 2020-04-07T23:34:10 Last Updated: 2024-08-04T11:35:13.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of code, the verification of serialized objects sent between nodes (connected via the Peers protocol) allows insecure objects to be deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/posts/ejbca-security-advisory-deserialization-bug
CVE ID: CVE-2020-11631 State: PUBLISHED Published: 2020-04-07T23:33:58 Last Updated: 2024-08-04T11:35:13.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. An error state can be generated in the CA UI by a malicious user. This, in turn, allows exploitation of other bugs. This follow-on exploitation can lead to privilege escalation and remote code execution. (This is exploitable only when at least one accessible port lacks a requirement for client certificate authentication. These ports are 8442 or 8080 in a standard installation.) Additional Analyst Notes: - CVE Program Container: References: - https://supp
8442 or 8080 in a standard installation.) Additional Analyst Notes: - CVE Program Container: References: - https://support.primekey.com/news/primekey-announcements
CVE ID: CVE-2020-11632 State: PUBLISHED Published: 2021-07-15T19:18:43 Last Updated: 2024-08-04T11:35:13.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105
CVE ID: CVE-2020-11633 State: PUBLISHED Published: 2021-07-15T17:01:13 Last Updated: 2024-08-04T11:35:13.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.81
CVE ID: CVE-2020-11634 State: PUBLISHED Published: 2021-07-15T19:18:48 Last Updated: 2024-08-04T11:35:13.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context. Additional Analyst Notes: - CVE Program Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105
CVE ID: CVE-2020-11635 State: PUBLISHED Published: 2021-02-16T19:37:39 Last Updated: 2024-08-04T11:35:13.634Z Vendors: n/a Products: Zscaler Client Connector for Windows Problem Types: Improper Privilege Management Description: The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges. Additional Analyst Notes: - CVE Program Container: References: - https://trust.zscaler.com/posts/7316
CVE ID: CVE-2020-11637 State: PUBLISHED Published: 2020-10-15T15:08:14.438915Z Last Updated: 2024-09-16T16:33:01.394Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: B&R Products: Automation Runtime Problem Types: CWE-401 Description: A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/assets/1595163815396-de-original-1.0.pdf
CVE ID: CVE-2020-11639 State: PUBLISHED Published: 2024-07-23T17:26:55.489Z Last Updated: 2024-08-04T11:35:13.593Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Advant MOD 300 AdvaBuild Problem Types: CWE-924 Description: An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each process might be affected differently. The process could crash or cause communication issues on the affected node, effectively causing a denial-of-service attack. The attacker could tamper with the data transmitted, causing the product to store wrong information or act on wrong data or display wr