Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9922 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:25:00.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpCompareResourceNames_U+0x0000000000000062." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9922
CVE ID: CVE-2017-9923 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:59.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9923
CVE ID: CVE-2017-9924 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:59.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV starting at image00000000_00400000+0x000000000001b72a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9924
CVE ID: CVE-2017-9925 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:25:00.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9925
CVE ID: CVE-2017-9926 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:25:00.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a "Read Access Violation starting at image00000000_00400000+0x000000000001b596." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9926
CVE ID: CVE-2017-9927 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:59.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a "Read Access Violation starting at image00000000_00400000+0x000000000001b5fe." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9927
CVE ID: CVE-2017-9928 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T17:25:00.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in.html - https://github.com/ckolivas/lrzip/issues/74 - https://security.gentoo.org/glsa/202005-01 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE ID: CVE-2017-9929 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T17:24:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in_24.html - https://github.com/ckolivas/lrzip/issues/75 - https://security.gentoo.org/glsa/202005-01 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE ID: CVE-2017-9930 State: PUBLISHED Published: 2017-07-21T06:00:00 Last Updated: 2024-08-05T17:24:59.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-csrf.html
CVE ID: CVE-2017-9931 State: PUBLISHED Published: 2017-07-21T06:00:00 Last Updated: 2024-08-05T17:24:59.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-cross.html
CVE ID: CVE-2017-9932 State: PUBLISHED Published: 2017-07-21T06:00:00 Last Updated: 2024-08-05T17:24:59.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/authentication-bypass-in-green-packet.html
CVE ID: CVE-2017-9933 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:25:00.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99450 - http://www.securitytracker.com/id/1038817 - https://developer.joomla.org/security-centre/696-20170601-core-information-disclosure
CVE ID: CVE-2017-9934 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:24:59.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99451 - https://developer.joomla.org/security-centre/697-20170602-core-xss-vulnerability - http://www.securitytracker.com/id/1038817
CVE ID: CVE-2017-9935 State: PUBLISHED Published: 2017-06-26T12:00:00 Last Updated: 2024-08-05T17:24:59.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/360
se arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3606-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2704 - https://lists.debian.org/debian-lts-announce/2017/12/msg00008.html - http://www.securityfocus.com/bid/99296 - https://www.debian.org/security/2018/dsa-4100
CVE ID: CVE-2017-9936 State: PUBLISHED Published: 2017-06-26T12:00:00 Last Updated: 2024-08-05T17:24:59.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99300 - https://usn.ubuntu.com/3602-1/ - https://www.exploit-db.com/exploits/42300/ - http://bugzilla.maptools.org/show_bug.cgi?id=2706 - http://www.debian.org/security/2017/dsa-3903
CVE ID: CVE-2017-9937 State: PUBLISHED Published: 2017-06-26T12:00:00 Last Updated: 2024-08-05T17:24:59.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2707 - http://www.securityfocus.com/bid/99304 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2017-9938 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T17:25:00.568Z Vendors: n/a Products: SIMATIC Logon All versions before V1.6 Problem Types: CWE-787 Description: A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99539 - https://www.tenable.com/security/research/tra-2017-34 - https://www.siemens.com/cert/pool/cert/siemens_security_advisor
https://www.tenable.com/security/research/tra-2017-34 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-804859.pdf
CVE ID: CVE-2017-9939 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T17:25:00.591Z Vendors: n/a Products: SiPass integrated All versions before V2.70 Problem Types: CWE-287 Description: A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf - http://www.securityfocus.com/bid/99578
CVE ID: CVE-2017-9940 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T17:25:00.497Z Vendors: n/a Products: SiPass integrated All versions before V2.70 Problem Types: CWE-269 Description: A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf - http://www.securityfocus.com/bid/99578
CVE ID: CVE-2017-9941 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T17:25:00.468Z Vendors: n/a Products: SiPass integrated All versions before V2.70 Problem Types: CWE-300 Description: A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf - http://www.securityfocus.com/bid/99578
CVE ID: CVE-2017-9942 State: PUBLISHED Published: 2017-08-08T00:00:00 Last Updated: 2024-08-05T17:24:59.996Z Vendors: n/a Products: SiPass integrated All versions before V2.70 Problem Types: CWE-257 Description: A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-339433.pdf - http://www.securityfocus.com/bid/99578
CVE ID: CVE-2017-9944 State: PUBLISHED Published: 2017-12-26T04:00:00 Last Updated: 2024-08-05T17:25:00.615Z Vendors: n/a Products: Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03 Problem Types: CWE-288 Description: A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf - http://www.securityfocus.com/bid/101184
CVE ID: CVE-2017-9945 State: PUBLISHED Published: 2017-08-30T19:00:00 Last Updated: 2024-08-05T17:25:00.255Z Vendors: n/a Products: Siemens 7KM PAC Switched Ethernet PROFINET expansion module: All versions < V2.1.3 Problem Types: Denial-of-Service Description: In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100562 - https://www.siemens.com
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100562 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-771218.pdf
CVE ID: CVE-2017-9946 State: PUBLISHED Published: 2017-10-23T00:00:00 Last Updated: 2024-08-05T17:25:00.381Z Vendors: n/a Products: APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 Problem Types: CWE-287 Description: A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101248 - https://www.siemens.com/cert/pool/cert/siemens_security_adviso
: References: - http://www.securityfocus.com/bid/101248 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html
CVE ID: CVE-2017-9947 State: PUBLISHED Published: 2017-10-23T00:00:00 Last Updated: 2024-08-05T17:25:00.484Z Vendors: n/a Products: APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 Problem Types: CWE-538 Description: A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101248 - https://w
es. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101248 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html
CVE ID: CVE-2017-9948 State: PUBLISHED Published: 2017-06-26T14:00:00 Last Updated: 2024-08-05T17:24:59.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99281 - https://www.vulnerability-lab.com/get_content.php?id=2071 - https://www.vulnerability-lab.com/get_content.php?id=2084 - https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-unco
.php?id=2084 - https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735
CVE ID: CVE-2017-9949 State: PUBLISHED Published: 2017-06-26T20:00:00 Last Updated: 2024-08-05T17:24:59.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/7683 - https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191 - http://www.securityfoc
issues/7683 - https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191 - http://www.securityfocus.com/bid/99305
CVE ID: CVE-2017-9951 State: PUBLISHED Published: 2017-07-17T06:00:00 Last Updated: 2024-08-05T17:24:59.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3588-1/ - https://github.com/memcached/memcached/wiki/ReleaseNotes1439 - http://www.s
ferences: - https://usn.ubuntu.com/3588-1/ - https://github.com/memcached/memcached/wiki/ReleaseNotes1439 - http://www.securityfocus.com/bid/99874 - https://www.debian.org/security/2018/dsa-4218 - https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/ - https://groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ
CVE ID: CVE-2017-9953 State: PUBLISHED Published: 2017-06-26T23:00:00Z Last Updated: 2024-09-16T16:57:59.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1465061
CVE ID: CVE-2017-9954 State: PUBLISHED Published: 2017-06-26T23:00:00 Last Updated: 2024-08-05T17:25:00.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21670 - https://security.gentoo.org/glsa/201709-02 - http://www.securityfocus.com/bid/99307
CVE ID: CVE-2017-9955 State: PUBLISHED Published: 2017-06-26T23:00:00 Last Updated: 2024-08-05T17:24:59.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21665 - http://www.securityfoc
s: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21665 - http://www.securityfocus.com/bid/99573
CVE ID: CVE-2017-9956 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-17T00:37:07.545Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Improper Authentication Description: An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/ - http://www.securityfocus.com/bid/99344
CVE ID: CVE-2017-9957 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-16T23:36:25.422Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Use of Hardcoded Password Description: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/ - http://www.securityfocus.com/bid/99344
CVE ID: CVE-2017-9958 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-16T23:36:15.789Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Improper Access Control Description: An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/ - http://www.securityfocus.com/bid/99344
CVE ID: CVE-2017-9959 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-05T17:25:00.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/ - http://www.securityfocus.com/bid/99344
CVE ID: CVE-2017-9960 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-16T17:32:51.192Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Information Exposure through an error message Description: An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/ - http://www.securityfocus.com/bid/99344