Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44435 State: PUBLISHED Published: 2021-12-14T12:06:56 Last Updated: 2024-08-04T04:25:16.488Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-121 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14903) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44436 State: PUBLISHED Published: 2021-12-14T12:06:57 Last Updated: 2024-08-04T04:25:16.497Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14905) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.
CVE ID: CVE-2021-44437 State: PUBLISHED Published: 2021-12-14T12:06:58 Last Updated: 2024-08-04T04:25:16.594Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14906) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44438 State: PUBLISHED Published: 2021-12-14T12:06:59 Last Updated: 2024-08-04T04:25:16.464Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14907) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44439 State: PUBLISHED Published: 2021-12-14T12:06:59 Last Updated: 2024-08-04T04:25:16.782Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14908) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.
CVE ID: CVE-2021-44440 State: PUBLISHED Published: 2021-12-14T12:07:00 Last Updated: 2024-08-04T04:25:16.432Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-119 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to memory corruption condition while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14912) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44441 State: PUBLISHED Published: 2021-12-14T12:07:01 Last Updated: 2024-08-04T04:25:16.418Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14913) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44442 State: PUBLISHED Published: 2021-12-14T12:07:02 Last Updated: 2024-08-04T04:25:16.465Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-122 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14995) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44443 State: PUBLISHED Published: 2021-12-14T12:07:03 Last Updated: 2024-08-04T04:25:16.953Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15039) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44444 State: PUBLISHED Published: 2021-12-14T12:07:04 Last Updated: 2024-08-04T04:25:16.449Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15052) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf - http://packetstormsecurity.com/files/167317/Microsoft-Office-MSDT-Follina-Proof-Of-Concept.html
CVE ID: CVE-2021-44445 State: PUBLISHED Published: 2021-12-14T12:07:05 Last Updated: 2024-08-04T04:25:16.917Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-122 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15054) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44446 State: PUBLISHED Published: 2021-12-14T12:07:05 Last Updated: 2024-08-04T04:25:16.498Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14828, ZDI-CAN-14898) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-352143.pdf
CVE ID: CVE-2021-44447 State: PUBLISHED Published: 2021-12-14T12:07:06 Last Updated: 2024-08-04T04:25:16.806Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-416 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14911) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-352143.pdf
CVE ID: CVE-2021-44448 State: PUBLISHED Published: 2021-12-14T12:07:07 Last Updated: 2024-08-04T04:25:16.918Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14843, ZDI-CAN-15051) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-352143.pdf
CVE ID: CVE-2021-44449 State: PUBLISHED Published: 2021-12-14T12:07:08 Last Updated: 2024-08-04T04:25:16.834Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14830) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-396621.pdf
CVE ID: CVE-2021-44450 State: PUBLISHED Published: 2021-12-14T12:07:08 Last Updated: 2024-08-04T04:25:16.826Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15055, ZDI-CAN-14915, ZDI-CAN-14865) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf
-14865) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-396621.pdf
CVE ID: CVE-2021-44451 State: PUBLISHED Published: 2022-02-01T13:16:32 Last Updated: 2024-08-04T04:25:16.474Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-522 Description: Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/xww1pccs2ckb5506wrf1v4lmxg198vkb
CVE ID: CVE-2021-44453 State: PUBLISHED Published: 2021-12-23T19:48:38.488413Z Last Updated: 2024-09-17T01:46:17.937Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Problem Types: CWE-78 Description: mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01
CVE ID: CVE-2021-44454 State: PUBLISHED Published: 2022-02-09T22:04:50.000Z Last Updated: 2025-05-05T16:45:53.117Z Vendors: n/a Products: Intel(R) Quartus(R) Prime Pro Edition Problem Types: escalation of privilege Description: Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE ID: CVE-2021-44457 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:44.206Z Description: No description available.
CVE ID: CVE-2021-44458 State: PUBLISHED Published: 2022-01-10T15:05:44 Last Updated: 2024-08-04T04:25:16.457Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Mirantis Products: Lens Problem Types: CWE-287 Description: Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker to execute arbitrary commands as the Lens user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Mirantis/security/blob/main/advisories/0001.md
CVE ID: CVE-2021-44460 State: PUBLISHED Published: 2023-04-25T18:33:33.360Z Last Updated: 2024-08-04T04:25:16.420Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107685
CVE ID: CVE-2021-44461 State: PUBLISHED Published: 2023-04-25T18:33:34.490Z Last Updated: 2024-08-04T04:25:16.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Enterprise Problem Types: CWE-79 Description: Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107686
CVE ID: CVE-2021-44462 State: PUBLISHED Published: 2022-03-25T18:02:28.244Z Last Updated: 2025-04-16T17:58:37.390Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape EnvisionRV Problem Types: CWE-20 Description: This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures. User interaction is required to exploit this vulnerability as an attacker must trick a valid user to open a malicious HMI pro
interaction is required to exploit this vulnerability as an attacker must trick a valid user to open a malicious HMI project file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-02
CVE ID: CVE-2021-44463 State: PUBLISHED Published: 2022-01-28T19:09:50.632Z Last Updated: 2025-04-17T15:51:38.177Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-04
CVE ID: CVE-2021-44464 State: PUBLISHED Published: 2022-01-21T18:17:42.000Z Last Updated: 2025-04-16T16:47:01.630Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Fresenius Kabi Products: Vigilant Software Suite (Mastermed Dashboard) Problem Types: CWE-798 Description: Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE ID: CVE-2021-44465 State: PUBLISHED Published: 2023-04-25T18:33:39.776Z Last Updated: 2025-02-03T17:16:04.447Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/odoo/odoo/issues/107692
CVE ID: CVE-2021-44466 State: PUBLISHED Published: 2021-12-30T21:31:24 Last Updated: 2024-08-04T04:25:16.432Z Vendors: n/a Products: Bitmask Riseup VPN 0.21.6 Problem Types: Local Privilege Escalation Description: Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls. When the software is installed with a non-default installation directory off of the system root, the installer fails to properly set ACLs. This allows lower privileged users to replace the VPN executable with a malicious one. When a higher privileged user such as an Administrator launches that executable, it is possible for the lower privileged user to escalate to Administrator pri
an Administrator launches that executable, it is possible for the lower privileged user to escalate to Administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-58
CVE ID: CVE-2021-44467 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:48:23.271Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-284 Description: A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
re version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44467/
CVE ID: CVE-2021-44470 State: PUBLISHED Published: 2022-08-18T19:36:39.000Z Last Updated: 2025-05-05T16:45:38.594Z Vendors: n/a Products: Intel(R) Connect M Android application Problem Types: information disclosure Description: Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00596.html
CVE ID: CVE-2021-44471 State: PUBLISHED Published: 2021-12-22T18:06:49.880794Z Last Updated: 2024-09-16T23:26:35.646Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-79 Description: DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03
CVE ID: CVE-2021-44476 State: PUBLISHED Published: 2023-04-25T18:33:32.237Z Last Updated: 2025-02-03T19:33:55.804Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-267 Description: A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/odoo/odoo/issues/107684 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-44477 State: PUBLISHED Published: 2022-03-25T18:02:29.378Z Last Updated: 2025-04-16T16:38:22.653Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GE Gas Power Products: ToolBoxST Problem Types: CWE-611 Description: GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project/template file. Additional Analyst Notes: - CVE Program Containe
ML parser is not sanitized while parsing the XML project/template file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-025-01
CVE ID: CVE-2021-44478 State: PUBLISHED Published: 2022-03-08T11:31:24 Last Updated: 2024-08-04T04:25:16.856Z Vendors: Siemens Products: Polarion ALM, Polarion WebClient for SVN Problem Types: CWE-79 Description: A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to execute arbitrary code and extract sensitive information by sending a specially crafted link to users with administrator privileges. Additional Analyst Notes: - CVE Program Container: R
ng a specially crafted link to users with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-562051.pdf
CVE ID: CVE-2021-44479 State: PUBLISHED Published: 2021-12-01T14:56:53 Last Updated: 2024-08-04T04:25:16.832Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:L/A:L/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/published-advisories/ - https://github.com/Xen1thLabs-AE/CVE-2021-40154