Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38443 State: PUBLISHED Published: 2022-05-05T15:16:53.000Z Last Updated: 2025-04-16T16:23:56.123Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Eclipse Products: CycloneDDS Problem Types: CWE-228 Description: Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 - https://projects.eclipse.org/projects/iot.cyclonedds
CVE ID: CVE-2021-38445 State: PUBLISHED Published: 2022-05-05T15:17:32.000Z Last Updated: 2025-04-16T16:23:48.608Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: OCI Products: OpenDDS Problem Types: CWE-130 Description: OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 - https://opendds.org/
CVE ID: CVE-2021-38447 State: PUBLISHED Published: 2022-05-05T15:18:06.000Z Last Updated: 2025-04-16T16:23:41.117Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: OCI Products: OpenDDS Problem Types: CWE-405 Description: OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 - https://opendds.org/
CVE ID: CVE-2021-38448 State: PUBLISHED Published: 2021-11-22T18:58:45 Last Updated: 2024-08-04T01:44:22.375Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: Trane Products: Symbio Problem Types: CWE-94 Description: The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-266-01
CVE ID: CVE-2021-38449 State: PUBLISHED Published: 2021-10-22T11:23:56.142540Z Last Updated: 2024-09-17T02:21:52.699Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-123 Description: Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38450 State: PUBLISHED Published: 2021-10-27T00:48:50.750971Z Last Updated: 2024-09-16T16:23:31.978Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: Trane Products: Tracer SC, Tracer SC+, Tracer Concierge Problem Types: CWE-94 Description: The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-266-02
CVE ID: CVE-2021-38451 State: PUBLISHED Published: 2021-10-22T11:23:37.327074Z Last Updated: 2024-09-17T01:41:23.696Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: AUVESY Products: Versiondog Problem Types: CWE-125 Description: The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38452 State: PUBLISHED Published: 2021-10-12T13:37:41.005539Z Last Updated: 2024-09-16T16:17:53.926Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Moxa Products: MXview Network Management Software Problem Types: CWE-22 Description: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
CVE ID: CVE-2021-38453 State: PUBLISHED Published: 2021-10-22T11:23:24.608745Z Last Updated: 2024-09-17T01:30:40.868Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-15 Description: Some API functions allow interaction with the registry, which includes reading values as well as data modification. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38454 State: PUBLISHED Published: 2021-10-12T13:37:54.121511Z Last Updated: 2024-09-16T23:22:08.753Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Moxa Products: MXview Network Management Software Problem Types: CWE-284 Description: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
CVE ID: CVE-2021-38455 State: PUBLISHED Published: 2021-10-22T11:23:43.755680Z Last Updated: 2024-09-16T18:19:29.900Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-20 Description: The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38456 State: PUBLISHED Published: 2021-10-12T13:37:46.688951Z Last Updated: 2024-09-17T03:58:44.651Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: MXview Network Management Software Problem Types: CWE-259 Description: A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
CVE ID: CVE-2021-38457 State: PUBLISHED Published: 2021-10-22T11:23:50.180857Z Last Updated: 2024-09-16T21:07:39.873Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-284 Description: The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form of authentication. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38458 State: PUBLISHED Published: 2021-10-12T13:38:03.419969Z Last Updated: 2024-09-16T18:02:54.478Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: MXview Network Management Software Problem Types: CWE-74 Description: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
CVE ID: CVE-2021-38459 State: PUBLISHED Published: 2021-10-22T11:23:30.539113Z Last Updated: 2024-09-16T21:56:48.360Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-294 Description: The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user passwords or delete the database. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ics
e database. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38460 State: PUBLISHED Published: 2021-10-12T13:38:11.412639Z Last Updated: 2024-09-17T00:42:28.701Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Moxa Products: MXview Network Management Software Problem Types: CWE-523 Description: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
CVE ID: CVE-2021-38461 State: PUBLISHED Published: 2021-10-22T11:23:18.809729Z Last Updated: 2024-09-16T21:56:39.301Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: AUVESY Products: Versiondog Problem Types: CWE-321 Description: The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38462 State: PUBLISHED Published: 2021-10-19T12:10:32.966857Z Last Updated: 2024-09-16T16:44:09.207Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-521 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38463 State: PUBLISHED Published: 2021-10-22T11:23:06.751849Z Last Updated: 2024-09-17T03:38:11.047Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-400 Description: The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38464 State: PUBLISHED Published: 2021-10-19T12:10:19.637041Z Last Updated: 2024-09-17T03:33:36.623Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-326 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38465 State: PUBLISHED Published: 2021-10-22T11:23:13.336916Z Last Updated: 2024-09-16T19:04:41.291Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-400 Description: The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38466 State: PUBLISHED Published: 2021-10-19T12:10:25.490144Z Last Updated: 2024-09-17T03:12:58.319Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-79 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38467 State: PUBLISHED Published: 2021-10-22T11:23:01.298554Z Last Updated: 2024-09-17T02:31:25.558Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-416 Description: A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38468 State: PUBLISHED Published: 2021-10-19T12:10:12.796873Z Last Updated: 2024-09-16T16:49:18.085Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-79 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to the system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38469 State: PUBLISHED Published: 2021-10-22T11:22:44.045095Z Last Updated: 2024-09-16T19:30:55.153Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-427 Description: Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38470 State: PUBLISHED Published: 2021-10-19T12:10:06.565752Z Last Updated: 2024-09-17T00:02:37.754Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-78 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38471 State: PUBLISHED Published: 2021-10-22T11:22:56.182767Z Last Updated: 2024-09-16T21:03:24.416Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-434 Description: There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38472 State: PUBLISHED Published: 2021-10-19T12:10:48.128551Z Last Updated: 2024-09-16T22:30:31.547Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-1021 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending a link to an administrator that frames the router’s management portal and could lure the administrator to perform changes. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38473 State: PUBLISHED Published: 2021-10-22T11:22:27.081856Z Last Updated: 2024-09-16T19:00:35.596Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-119 Description: The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38474 State: PUBLISHED Published: 2021-10-19T12:10:01.527846Z Last Updated: 2024-09-16T17:47:53.636Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-307 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and without harming the normal operation of the user. This could allow an attacker to gain valid credentials for the product interface. Additional Analyst Notes: - CVE Program Containe
allow an attacker to gain valid credentials for the product interface. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38475 State: PUBLISHED Published: 2021-10-22T11:22:22.362735Z Last Updated: 2024-09-16T16:42:45.461Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: AUVESY Products: Versiondog Problem Types: CWE-732 Description: The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38476 State: PUBLISHED Published: 2021-10-19T12:10:39.203568Z Last Updated: 2024-09-16T16:17:43.791Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-204 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38477 State: PUBLISHED Published: 2021-10-22T11:22:38.586028Z Last Updated: 2024-09-17T04:09:59.109Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-73 Description: There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the deletion of files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38478 State: PUBLISHED Published: 2021-10-19T12:11:15.315153Z Last Updated: 2024-09-17T03:47:35.024Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-78 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38479 State: PUBLISHED Published: 2021-10-22T11:22:51.132861Z Last Updated: 2024-09-16T17:28:11.318Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: AUVESY Products: Versiondog Problem Types: CWE-787 Description: Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38480 State: PUBLISHED Published: 2021-10-19T12:11:08.830902Z Last Updated: 2024-09-17T03:13:52.768Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-352 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an attacker to remotely perform actions on the router’s management portal, such as making configuration changes, changing administrator credentials, and running system commands on the router. Additional Analyst Not
iguration changes, changing administrator credentials, and running system commands on the router. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38481 State: PUBLISHED Published: 2021-10-22T11:22:32.687290Z Last Updated: 2024-09-16T22:46:06.579Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: AUVESY Products: Versiondog Problem Types: CWE-89 Description: The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
CVE ID: CVE-2021-38482 State: PUBLISHED Published: 2021-10-19T12:10:54.302659Z Last Updated: 2024-09-17T02:37:04.732Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-79 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to hijack sessions of users connected to the system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38483 State: PUBLISHED Published: 2022-04-20T15:30:30.126Z Last Updated: 2025-04-16T16:28:52.540Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: FANUC Products: ROBOGUIDE Problem Types: CWE-732 Description: The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03