Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30170 State: PUBLISHED Published: 2025-05-22T17:38:50.749Z Last Updated: 2025-05-22T18:32:02.988Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-497 Description: Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Downlo
through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2025-30171 State: PUBLISHED Published: 2025-05-22T17:41:18.754Z Last Updated: 2025-05-22T18:12:01.186Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-863 Description: System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021
st Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2025-30172 State: PUBLISHED Published: 2025-05-22T17:43:59.302Z Last Updated: 2025-05-22T18:05:54.158Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-94 Description: Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Actio
nces: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2025-30173 State: PUBLISHED Published: 2025-05-22T17:45:40.422Z Last Updated: 2025-05-22T18:03:47.355Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-434 Description: File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Lau
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2025-30174 State: PUBLISHED Published: 2025-05-13T09:38:37.040Z Last Updated: 2025-07-08T10:34:32.889Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SIMATIC PCS neo V4.1, SIMATIC PCS neo V5.0, SINEC NMS, SINEMA Remote Connect, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19, Totally Integrated Automation Portal (TIA Portal) V20, User Management Component (UMC) Problem Types: CWE-125 Description: A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NM
vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denia
flow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-614723.html
CVE ID: CVE-2025-30175 State: PUBLISHED Published: 2025-05-13T09:38:38.404Z Last Updated: 2025-07-08T10:34:34.185Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SIMATIC PCS neo V4.1, SIMATIC PCS neo V5.0, SINEC NMS, SINEMA Remote Connect, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19, Totally Integrated Automation Portal (TIA Portal) V20, User Management Component (UMC) Problem Types: CWE-787 Description: A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NM
vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a deni
rflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-614723.html
CVE ID: CVE-2025-30176 State: PUBLISHED Published: 2025-05-13T09:38:39.738Z Last Updated: 2025-07-08T10:34:35.475Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SIMATIC PCS neo V4.1, SIMATIC PCS neo V5.0, SINEC NMS, SINEMA Remote Connect, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19, Totally Integrated Automation Portal (TIA Portal) V20, User Management Component (UMC) Problem Types: CWE-125 Description: A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NM
CVE ID: CVE-2025-30177 State: PUBLISHED Published: 2025-04-01T11:56:30.484Z Last Updated: 2025-04-01T18:42:45.532Z Vendors: Apache Software Foundation Products: Apache Camel Problem Types: Bypass/Injection, CWE-164 Description: Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6. Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS. Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the "out" direction, while it doesn'
, in particular the custom header filter strategy used by the component only filter the "out" direction, while it doesn't filter the "in" direction. This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://camel.apache.org/security/CVE-2025-27636.html - https://camel.apache.org/security/CVE-2025-29891.html - https://lists.apache.org/thread/dj79zdgw01j337lr9gvyy4sv8xfyw8py
CVE ID: CVE-2025-30179 State: PUBLISHED Published: 2025-03-21T08:24:57.929Z Last Updated: 2025-03-21T17:27:31.203Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-30182 State: PUBLISHED Published: 2025-11-11T16:50:31.638Z Last Updated: 2025-11-13T04:55:34.866Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for Python software installers Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when att
a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01382.html
CVE ID: CVE-2025-30183 State: PUBLISHED Published: 2025-06-09T22:30:24.576Z Last Updated: 2025-06-10T15:28:35.577Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CyberData Products: 011209 SIP Emergency Intercom Problem Types: CWE-522 Description: CyberData 011209 Intercom does not properly store or protect web server admin credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE ID: CVE-2025-30184 State: PUBLISHED Published: 2025-06-09T22:05:25.031Z Last Updated: 2025-06-10T15:28:53.123Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CyberData Products: 011209 SIP Emergency Intercom Problem Types: CWE-288 Description: CyberData 011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE ID: CVE-2025-30185 State: PUBLISHED Published: 2025-11-11T16:50:33.164Z Last Updated: 2025-11-14T17:36:54.617Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel UEFI reference platforms Problem Types: Escalation of Privilege, Denial of Service, CWE-489 Description: Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are not present without special internal knowledge
esult may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01378.html
CVE ID: CVE-2025-30187 State: PUBLISHED Published: 2025-09-18T09:21:32.274Z Last Updated: 2025-11-04T21:09:56.609Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PowerDNS Products: DNSdist Problem Types: CWE-835 Description: In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dnsdist.org/security-advisories/powerdns-adv
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-05.html
CVE ID: CVE-2025-30188 State: PUBLISHED Published: 2025-10-31T08:54:41.426Z Last Updated: 2025-10-31T18:10:29.713Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-400 Description: Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.open-xchange.com/appsuite
e known Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json
CVE ID: CVE-2025-30189 State: PUBLISHED Published: 2025-10-31T09:02:33.273Z Last Updated: 2025-11-04T21:09:57.944Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Open-Xchange GmbH Products: OX Dovecot Pro Problem Types: CWE-1250 Description: When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login, all subsequent logins are for same user. Install fixed version or disable caching either globally or for the impacted passdb/userdb drivers. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP
userdb drivers. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2025/oxdc-adv-2025-0001.json
CVE ID: CVE-2025-30191 State: PUBLISHED Published: 2025-10-31T08:54:42.202Z Last Updated: 2025-10-31T18:27:58.679Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-1021 Description: Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentati
blicly available exploits are known Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json
CVE ID: CVE-2025-30192 State: PUBLISHED Published: 2025-07-21T12:49:31.532Z Last Updated: 2025-07-21T13:05:35.258Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PowerDNS Products: Recursor Problem Types: CWE-345 Description: An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter validation of the received answers. The most strict mitigation done when the new setting outgoing.edns_subnet_harden (old style name edns-subnet-hard
swers. The most strict mitigation done when the new setting outgoing.edns_subnet_harden (old style name edns-subnet-harden) is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html
CVE ID: CVE-2025-30193 State: PUBLISHED Published: 2025-05-20T11:17:17.378Z Last Updated: 2025-05-20T13:16:34.707Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PowerDNS Products: DNSdist Problem Types: CWE-674 Description: In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.10 version. A workaround is to restrict the maximum number of queries on incoming TCP connectio
grade to the patched 1.9.10 version. A workaround is to restrict the maximum number of queries on incoming TCP connections to a safe value, like 50, via the setMaxTCPQueriesPerConnection setting. We would like to thank Renaud Allard for bringing this issue to our attention. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-03.html
CVE ID: CVE-2025-30194 State: PUBLISHED Published: 2025-04-29T11:25:47.141Z Last Updated: 2025-06-20T15:42:56.102Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PowerDNS Products: DNSdist Problem Types: CWE-416 Description: When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (double-free) and crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.9 version. A workaround is to temporarily switch to the h2o provider until DNSdist has been upgraded to a fixed version. We would like to thank Charles Howes f
ly switch to the h2o provider until DNSdist has been upgraded to a fixed version. We would like to thank Charles Howes for bringing this issue to our attention. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-02.html
CVE ID: CVE-2025-30195 State: PUBLISHED Published: 2025-04-07T13:24:17.879Z Last Updated: 2025-04-07T16:03:15.727Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PowerDNS Products: Recursor Problem Types: CWE-476 Description: An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
is issue to our attention. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html
CVE ID: CVE-2025-30196 State: PUBLISHED Published: 2025-03-19T15:38:12.623Z Last Updated: 2025-03-19T18:13:51.417Z Vendors: Jenkins Project Products: Jenkins AnchorChain Plugin Description: Jenkins AnchorChain Plugin 1.0 does not limit URL schemes for links it creates based on workspace content, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control the input file for the Anchor Chain post-build step. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-03-19/#SECURITY-3529
CVE ID: CVE-2025-30197 State: PUBLISHED Published: 2025-03-19T15:38:13.360Z Last Updated: 2025-03-21T14:08:19.969Z Vendors: Jenkins Project Products: Jenkins Zoho QEngine Plugin Description: Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-03-19/#SECURITY-3511
CVE ID: CVE-2025-30198 State: PUBLISHED Published: 2025-09-05T17:45:36.945Z Last Updated: 2025-09-08T18:20:26.088Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ECOVACS Products: DEEBOT X1 Series, DEEBOT T20 Series, DEEBOT T10 Series, DEEBOT T30 Series Problem Types: CWE-321, CWE-798 Description: ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json - ht
visories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json - https://www.cve.org/CVERecord?id=CVE-2025-30198
CVE ID: CVE-2025-30199 State: PUBLISHED Published: 2025-09-05T17:45:07.227Z Last Updated: 2025-09-08T18:21:06.626Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ECOVACS Products: DEEBOT X1 Series, DEEBOT T20 Series, DEEBOT T10 Series, DEEBOT T30 Series Problem Types: CWE-494 Description: ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/w
://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json - https://www.cve.org/CVERecord?id=CVE-2025-30199
CVE ID: CVE-2025-30200 State: PUBLISHED Published: 2025-09-05T17:43:20.802Z Last Updated: 2025-09-08T18:22:21.457Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ECOVACS Products: DEEBOT X1 Series, DEEBOT T20 Series, DEEBOT T10 Series, DEEBOT T30 Series Problem Types: CWE-321, CWE-798 Description: ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19
nts/ics-advisories/icsa-25-135-19 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json - https://www.cve.org/CVERecord?id=CVE-2025-30200