Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27923 State: PUBLISHED Published: 2024-03-06T20:28:46.695Z Last Updated: 2024-08-02T18:35:36.095Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-287, CWE-434 Description: Grav is a content management system (CMS). Prior to version 1.7.43, users who may write a page may use the `frontmatter` feature due to insufficient permission validation and inadequate file name validation. This may lead to remote code execution. Version 1.7.43 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getgrav/grav/security/advisories/GHSA-f6g2-h7qv
ram Container: - CISA ADP Vulnrichment: References: - https://github.com/getgrav/grav/security/advisories/GHSA-f6g2-h7qv-3m5v - https://github.com/getgrav/grav/commit/e3b0aa0c502aad251c1b79d1ee973dcd93711f07
CVE ID: CVE-2024-27926 State: PUBLISHED Published: 2024-03-06T20:36:04.280Z Last Updated: 2024-08-05T15:08:12.821Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: DIYgod Products: RSSHub Problem Types: CWE-79 Description: RSSHub is an open source RSS feed generator. Starting in version 1.0.0-master.cbbd829 and prior to version 1.0.0-master.d8ca915, ahen the specially crafted image is supplied to the internal media proxy, it proxies the image without handling XSS vulnerabilities, allowing for the execution of arbitrary JavaScript code. Users who access the deliberately constructed URL are affected. This vulnerability was fixed in version 1.0.0-master.d8ca915.
who access the deliberately constructed URL are affected. This vulnerability was fixed in version 1.0.0-master.d8ca915. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh - https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87
CVE ID: CVE-2024-27927 State: PUBLISHED Published: 2024-03-06T20:42:51.732Z Last Updated: 2024-08-05T17:56:18.434Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: DIYgod Products: RSSHub Problem Types: CWE-918 Description: RSSHub is an open source RSS feed generator. Prior to version 1.0.0-master.a429472, RSSHub allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Service (DoS) attacks. The attacker can send malicious requests to a RSSHub server, to make the server send HTTP GET requests to arbitrary destinations and see partial responses. Thi
s to a RSSHub server, to make the server send HTTP GET requests to arbitrary destinations and see partial responses. This may lead to leak the server IP address, which could be hidden behind a CDN; retrieving information in the internal network, e.g. which addresses/ports are accessible, the titles and meta descriptions of HTML pages; and denial of service amplification. The attacker could request the server to download some large files, or chain several SSRF requests in a single attacker request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3 - https://github.com/DIYgod/RSSHub
eferences: - https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3 - https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069 - https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14 - https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13 - https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7 - https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105
CVE ID: CVE-2024-27929 State: PUBLISHED Published: 2024-03-05T16:30:35.795Z Last Updated: 2024-08-02T00:41:55.900Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: SixLabors Products: ImageSharp Problem Types: CWE-416 Description: ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potentially leading to information disclosure. This issue has been patched in versions 3.1.3 and 2.1.7. Additional Analyst Notes: - CISA ADP Vulnric
mation disclosure. This issue has been patched in versions 3.1.3 and 2.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-65x7-c272-7g7r
CVE ID: CVE-2024-27930 State: PUBLISHED Published: 2024-03-18T15:29:11.382Z Last Updated: 2024-08-02T15:26:25.744Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-285 Description: GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can access sensitive fields data from items on which he has read access. This issue has been patched in version 10.0.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-82v
gram Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-82vv-j9pr-qmwq - https://github.com/glpi-project/glpi/commit/1942b70b2422fff51822f6eb3af500c94760871e - https://borelenzo.github.io/stuff/2024/02/29/glpi-pwned.html - https://github.com/glpi-project/glpi/releases/tag/10.0.13
CVE ID: CVE-2024-27931 State: PUBLISHED Published: 2024-03-05T16:43:11.934Z Last Updated: 2024-08-02T00:41:55.851Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: denoland Products: deno Problem Types: CWE-20 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Insufficient validation of parameters in `Deno.makeTemp*` APIs would allow for creation of files outside of the allowed directories. This may allow the user to overwrite important files on the system that may affect other systems. A user may provide a prefix or suffix to a `Deno.makeTemp*` API containing path traversal characters. This is fixed in Deno 1.41.1. A
ovide a prefix or suffix to a `Deno.makeTemp*` API containing path traversal characters. This is fixed in Deno 1.41.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/denoland/deno/security/advisories/GHSA-hrqr-jv8w-v9jh
CVE ID: CVE-2024-27932 State: PUBLISHED Published: 2024-03-06T20:45:16.373Z Last Updated: 2024-08-05T16:59:34.779Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: denoland Products: deno Problem Types: CWE-20 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.8.0 and prior to version 1.40.4, Deno improperly checks that an import specifier's hostname is equal to or a child of a token's hostname, which can cause tokens to be sent to servers they shouldn't be sent to. An auth token intended for `example[.]com` may be sent to `notexample[.]com`. Anyone who uses DENO_AUTH_TOKENS and imports potentially untrusted code is
le[.]com` may be sent to `notexample[.]com`. Anyone who uses DENO_AUTH_TOKENS and imports potentially untrusted code is affected. Version 1.40.0 contains a patch for this issue Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-5frw-4rwq-xhcr - https://github.com/denoland/deno/commit/de23e3b60b066481cc390f459497d5bef42a899b - https://github.com/denoland/deno/blob/3f4639c330a31741b0efda2f93ebbb833f4f95bc/cli/auth_tokens.rs#L89
CVE ID: CVE-2024-27933 State: PUBLISHED Published: 2024-03-06T20:52:17.599Z Last Updated: 2024-08-02T19:55:09.948Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: denoland Products: deno Problem Types: CWE-863 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. In version 1.39.0, use of raw file descriptors in `op_node_ipc_pipe()` leads to premature close of arbitrary file descriptors, allowing standard input to be re-opened as a different resource resulting in permission prompt bypass. Node child_process IPC relies on the JS side to pass the raw IPC file descriptor to `op_node_ipc_pipe()`, which returns a `IpcJsonStreamResource` ID associa
JS side to pass the raw IPC file descriptor to `op_node_ipc_pipe()`, which returns a `IpcJsonStreamResource` ID associated with the file descriptor. On closing the resource, the raw file descriptor is closed together. Use of raw file descriptors in `op_node_ipc_pipe()` leads to premature close of arbitrary file descriptors. This allow standard input (fd 0) to be closed and re-opened for a different resource, which allows a silent permission prompt bypass. This is exploitable by an attacker controlling the code executed inside a Deno runtime to obtain arbitrary code execution on the host machine regardless of permissions. This bug is known to be exploitable. There is a working exploit that a
on on the host machine regardless of permissions. This bug is known to be exploitable. There is a working exploit that achieves arbitrary code execution by bypassing prompts from zero permissions, additionally abusing the fact that Cache API lacks filesystem permission checks. The attack can be conducted silently as stderr can also be closed, suppressing all prompt outputs. Version 1.39.1 fixes the bug. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-6q4w-9x56-rmwq - https://github.com/denoland/deno/commit/55fac9f5ead6d30996400e8597c969b675c5a22b - https://github.com/denoland/deno/commit/5a91a
github.com/denoland/deno/commit/55fac9f5ead6d30996400e8597c969b675c5a22b - https://github.com/denoland/deno/commit/5a91a065b882215dde209baf626247e54c21a392 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L214 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L220 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L225 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L241 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L256 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L265 - https://github.com/denoland/deno
- https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L265 - https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L99
CVE ID: CVE-2024-27934 State: PUBLISHED Published: 2024-03-06T20:56:39.368Z Last Updated: 2024-08-02T19:24:42.692Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: denoland Products: deno Problem Types: CWE-416 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use of inherently unsafe `*const c_void` and `ExternalPointer` leads to use-after-free access of the underlying structure, resulting in arbitrary code execution. Use of inherently unsafe `*const c_void` and `ExternalPointer` leads to use-after-free access of the underlying structure, which is exploitable by an attacker controlli
ternalPointer` leads to use-after-free access of the underlying structure, which is exploitable by an attacker controlling the code executed inside a Deno runtime to obtain arbitrary code execution on the host machine regardless of permissions. This bug is known to be exploitable for both `*const c_void` and `ExternalPointer` implementations. Version 1.40.3 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-3j27-563v-28wf
CVE ID: CVE-2024-27935 State: PUBLISHED Published: 2024-03-06T21:02:14.359Z Last Updated: 2024-08-02T20:12:42.832Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: denoland Products: deno Problem Types: CWE-488 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. The issue arises from the re-use of a global buffer (BUF) in stream_wrap.ts used as a performance optimization to limit allocations during
om the re-use of a global buffer (BUF) in stream_wrap.ts used as a performance optimization to limit allocations during these asynchronous read operations. This can lead to data intended for one session being received by another session, potentially resulting in data corruption and unexpected behavior. This affects all users of Deno that use the node.js compatibility layer for network communication or other streams, including packages that may require node.js libraries indirectly. Version 1.36.3 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-wrqv-pf6j-mqjp - h
ner: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-wrqv-pf6j-mqjp - https://github.com/denoland/deno/issues/20188 - https://github.com/denoland/deno/commit/3e9fb8aafd9834ebacd27734cea4310caaf794c6
CVE ID: CVE-2024-27936 State: PUBLISHED Published: 2024-03-06T21:05:59.251Z Last Updated: 2024-08-02T00:41:55.809Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: denoland Products: deno Problem Types: CWE-150 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request contents. Deno is stripping any ANSI escape sequences from the permission prompt, but permissions given to the program are based on the contents that c
ANSI escape sequences from the permission prompt, but permissions given to the program are based on the contents that contain the ANSI escape sequences. Any Deno program can spoof the content of the interactive permission prompt by inserting a broken ANSI code, which allows a malicious Deno program to display the wrong file path or program name to the user. Version 1.41.0 of the deno library contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw - https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d - https://github.com/denol
-fv2w-6hrw - https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d - https://github.com/denoland/deno/commit/7e6b94231290020b55f1d08fb03ea8132781abc5
CVE ID: CVE-2024-27937 State: PUBLISHED Published: 2024-03-18T15:17:18.178Z Last Updated: 2024-08-02T00:41:55.829Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-285 Description: GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can obtain the email address of all GLPI users. This issue has been patched in version 10.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-98qw-hpg3-2hpj - https://git
gram Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-98qw-hpg3-2hpj - https://github.com/glpi-project/glpi/commit/d02c537d23cbb729fe18b87f71b3c6e84e9892da - https://borelenzo.github.io/stuff/2024/02/29/glpi-pwned.html - https://github.com/glpi-project/glpi/releases/tag/10.0.13
CVE ID: CVE-2024-27938 State: PUBLISHED Published: 2024-03-11T21:18:14.988Z Last Updated: 2024-08-27T19:48:22.783Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: postalserver Products: postal Problem Types: CWE-116 Description: Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from a server that a user has 'authorised' to send mail on their behalf but were not the genuine author of the e-mail. Postal is not affected for
has 'authorised' to send mail on their behalf but were not the genuine author of the e-mail. Postal is not affected for sending outgoing e-mails as email is re-encoded with `<CR><LF>` line endings when transmitted over SMTP. This issue has been addressed and users should upgrade to Postal v3.0.0 or higher. Once upgraded, Postal will only accept End of DATA sequences which are explicitly `<CR><LF>.<CR><LF>`. If a non-compliant sequence is detected it will be logged to the SMTP server log. There are no workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/postalserver/postal/security/advisories/GHSA-j42r-6c99-h
iner: - CISA ADP Vulnrichment: References: - https://github.com/postalserver/postal/security/advisories/GHSA-j42r-6c99-hqf2 - https://github.com/postalserver/postal/commit/0140dc4 - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide - https://www.postfix.org/smtp-smuggling.html
CVE ID: CVE-2024-27939 State: PUBLISHED Published: 2024-05-14T10:02:07.190Z Last Updated: 2024-08-02T00:41:55.764Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-862 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/s
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27940 State: PUBLISHED Published: 2024-05-14T10:02:08.412Z Last Updated: 2024-08-02T00:41:55.962Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-89 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27941 State: PUBLISHED Published: 2024-05-14T10:02:09.602Z Last Updated: 2024-08-02T00:41:55.801Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-89 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27942 State: PUBLISHED Published: 2024-05-14T10:02:10.764Z Last Updated: 2024-08-02T00:41:55.821Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-306 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert
ervice situation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27943 State: PUBLISHED Published: 2024-05-14T10:02:11.931Z Last Updated: 2024-08-02T00:41:55.786Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-73 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload generic files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.s
ecution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27944 State: PUBLISHED Published: 2024-05-14T10:02:13.176Z Last Updated: 2024-08-02T00:41:55.820Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-73 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.
xecution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE ID: CVE-2024-27945 State: PUBLISHED Published: 2024-05-14T10:02:14.365Z Last Updated: 2024-08-02T00:41:55.904Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-73 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
ieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-916916.html