Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-34582 State: PUBLISHED Published: 2021-11-10T11:22:04.699827Z Last Updated: 2024-09-16T20:11:38.654Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: PHOENIX CONTACT Products: FL MGUARD Problem Types: CWE-79 Description: In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-046/
CVE ID: CVE-2021-34583 State: PUBLISHED Published: 2021-10-26T09:55:45.129967Z Last Updated: 2024-09-16T20:43:32.357Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-122 Description: Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download= - https://www.tenable.com/security/research/tra-2021-47
CVE ID: CVE-2021-34584 State: PUBLISHED Published: 2021-10-26T09:55:46.638935Z Last Updated: 2024-09-16T22:25:58.664Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-126 Description: Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download= - https://www.tenable.com/security/research/tra-2021-47
CVE ID: CVE-2021-34585 State: PUBLISHED Published: 2021-10-26T09:55:48.273766Z Last Updated: 2024-09-16T21:58:06.631Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-252 Description: In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b16
References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download= - https://www.tenable.com/security/research/tra-2021-47
CVE ID: CVE-2021-34586 State: PUBLISHED Published: 2021-10-26T09:55:49.885522Z Last Updated: 2024-09-17T03:53:13.043Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-476 Description: In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download= - https://www.tenable.com/security/research/tra-2021-47
CVE ID: CVE-2021-34587 State: PUBLISHED Published: 2022-04-27T15:15:24.084444Z Last Updated: 2024-09-17T02:58:12.456Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-121 Description: In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34588 State: PUBLISHED Published: 2022-04-27T15:15:25.652629Z Last Updated: 2024-09-16T21:07:21.537Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-425 Description: In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot . Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34589 State: PUBLISHED Published: 2022-04-27T15:15:27.151287Z Last Updated: 2024-09-16T21:08:59.841Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-200 Description: In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34590 State: PUBLISHED Published: 2022-04-27T15:15:28.655810Z Last Updated: 2024-09-16T22:01:39.627Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-79 Description: In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34591 State: PUBLISHED Published: 2022-04-27T15:15:30.014135Z Last Updated: 2024-09-16T20:36:53.897Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-250 Description: In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34592 State: PUBLISHED Published: 2022-04-27T15:15:31.464112Z Last Updated: 2024-09-16T22:20:44.822Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-77 Description: In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34593 State: PUBLISHED Published: 2021-10-26T09:55:51.381906Z Last Updated: 2024-09-17T04:10:03.625Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-755 Description: In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&
Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&token=8faab0fc1e069f4edfca5d5aba8146139f67a175&download= - http://seclists.org/fulldisclosure/2021/Oct/64 - http://packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html - http://packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html
CVE ID: CVE-2021-34594 State: PUBLISHED Published: 2021-11-04T09:50:09.275622Z Last Updated: 2024-09-16T22:03:44.063Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Beckhoff Automation Products: TwinCAT OPC UA Server Problem Types: CWE-23 Description: TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-051/
CVE ID: CVE-2021-34595 State: PUBLISHED Published: 2021-10-26T09:55:52.868387Z Last Updated: 2024-09-17T03:42:53.986Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-823 Description: A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16878&token=e5644ec405590e66aefa62304cb8632df9fc9e9c&download=
CVE ID: CVE-2021-34596 State: PUBLISHED Published: 2021-10-26T09:55:54.408529Z Last Updated: 2024-09-16T22:40:47.921Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS V2 Problem Types: CWE-824 Description: A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16878&token=e5644ec405590e66aefa62304cb8632df9fc9e9c&download=
CVE ID: CVE-2021-34597 State: PUBLISHED Published: 2021-11-04T09:50:10.155218Z Last Updated: 2024-09-16T18:09:20.367Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Phoenix Contact Products: PC Worx Problem Types: CWE-20 Description: Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-052/
CVE ID: CVE-2021-34598 State: PUBLISHED Published: 2021-11-10T11:22:05.667433Z Last Updated: 2024-09-16T18:39:35.785Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PHOENIX CONTACT Products: FL MGUARD Problem Types: CWE-401 Description: In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-046/
CVE ID: CVE-2021-34599 State: PUBLISHED Published: 2021-12-01T09:00:15.883759Z Last Updated: 2024-09-17T02:32:29.181Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: CODESYS Products: CODESYS Git Problem Types: CWE-295 Description: Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the server to which the connection is made is not properly verified, the server connection is vulnerable to a man-in-the-middle attack. Additional
nection is made is not properly verified, the server connection is vulnerable to a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16959&token=3ce11e44a3277c4520d732ea2e630f2e06bd46ff&download
CVE ID: CVE-2021-34600 State: PUBLISHED Published: 2022-01-20T11:40:11.195769Z Last Updated: 2024-09-16T19:04:37.485Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Telenot Electronic GmbH Products: CompasX Problem Types: CWE-335 Description: Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2021-003-telenot-complex-insecure-keygen/
CVE ID: CVE-2021-34601 State: PUBLISHED Published: 2022-04-27T15:15:33.375616Z Last Updated: 2024-09-16T19:47:12.796Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-259 Description: In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34602 State: PUBLISHED Published: 2022-04-27T15:15:34.774811Z Last Updated: 2024-09-17T01:46:57.289Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bender / ebee Products: CC612, CC613, ICC15xx, ICC16xx Problem Types: CWE-78 Description: In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields that are executed with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2021-047
CVE ID: CVE-2021-34603 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2021-34604 State: REJECTED Published: 2022-06-24T07:46:06 Last Updated: 2022-06-24T07:46:06 Description: No description available.
CVE ID: CVE-2021-34605 State: PUBLISHED Published: 2022-05-11T14:25:19.483517Z Last Updated: 2024-09-17T01:51:15.399Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: XINJE Products: XD/E Series PLC Program Tool Problem Types: CWE-23 Description: A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected project file, or by initiating an upload program request from an infected Xinje PLC. This can result in remote code execution, information disclosure and denial of
ogram request from an infected Xinje PLC. This can result in remote code execution, information disclosure and denial of service of the system running the XINJE XD/E Series PLC Program Tool. Additional Analyst Notes: - CVE Program Container: References: - https://claroty.com/2022/05/11/blog-research-from-project-file-to-code-execution-exploiting-vulnerabilities-in-xinje-plc-program-tool/
CVE ID: CVE-2021-34606 State: PUBLISHED Published: 2022-05-11T14:25:21.096174Z Last Updated: 2024-09-16T17:24:14.853Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: XINJE Products: XD/E Series PLC Program Tool Problem Types: CWE-427 Description: A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, local attacker to load a malicious DLL. Local access is required to successfully exploit this vulnerability. This means the potential attacker must have access to the system and sufficient file-write privileges. If exploited, the attacker could place a malicious DLL file on the system, that when runni
icient file-write privileges. If exploited, the attacker could place a malicious DLL file on the system, that when running XINJE XD/E Series PLC Program Tool will allow the attacker to execute arbitrary code with the privileges of another user's account. Additional Analyst Notes: - CVE Program Container: References: - https://claroty.com/2022/05/11/blog-research-from-project-file-to-code-execution-exploiting-vulnerabilities-in-xinje-plc-program-tool/
CVE ID: CVE-2021-34607 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2021-34608 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2021-34609 State: PUBLISHED Published: 2021-07-08T16:45:06 Last Updated: 2024-08-04T00:19:47.361Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote SQL injection Description: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34610 State: PUBLISHED Published: 2021-07-08T15:44:09 Last Updated: 2024-08-04T00:19:47.759Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34611 State: PUBLISHED Published: 2021-07-08T15:40:07 Last Updated: 2024-08-04T00:19:47.888Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34612 State: PUBLISHED Published: 2021-07-08T19:37:07 Last Updated: 2024-08-04T00:19:47.894Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34613 State: PUBLISHED Published: 2021-07-08T19:42:24 Last Updated: 2024-08-04T00:19:47.870Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34614 State: PUBLISHED Published: 2021-07-08T16:51:11 Last Updated: 2024-08-04T00:19:47.729Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34615 State: PUBLISHED Published: 2021-07-08T19:59:14 Last Updated: 2024-08-04T00:19:47.812Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34616 State: PUBLISHED Published: 2021-07-08T20:04:21 Last Updated: 2024-08-04T00:19:47.682Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt
CVE ID: CVE-2021-34617 State: PUBLISHED Published: 2021-07-19T19:33:57 Last Updated: 2024-08-04T00:19:47.979Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote cross-site scripting (XSS) Description: A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container:
d patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt
CVE ID: CVE-2021-34618 State: PUBLISHED Published: 2021-07-19T19:38:57 Last Updated: 2024-08-04T00:19:47.482Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote denial of service (DoS) Description: A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.4.x: All versions; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this sec
.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt