Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8209 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T04:05:06.362Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Anal
CVE ID: CVE-2017-8210 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T04:00:20.658Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Anal
CVE ID: CVE-2017-8211 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:59:51.422Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Anal
CVE ID: CVE-2017-8212 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:26:05.679Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Anal
CVE ID: CVE-2017-8213 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:54:04.082Z Vendors: Huawei Technologies Co., Ltd. Products: SMC2.0 Problem Types: input validation Description: Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module. Additional Analyst Notes: - CVE Program Container: References: - http
xploit this vulnerability to crash the TLS module. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en
CVE ID: CVE-2017-8214 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:56:55.971Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Problem Types: unlpermission controlock code verification bypassing Description: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175,
ersions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B
ersions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en
CVE ID: CVE-2017-8215 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:16:47.792Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Problem Types: permission control Description: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL
91, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto
96 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en
CVE ID: CVE-2017-8216 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:08:28.638Z Vendors: Huawei Technologies Co., Ltd. Products: Warsaw Problem Types: permission control Description: Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permission control vulnerability. Due to improper authorization on specific processes, an attacker with the root privilege of a mobile Android system can exploit this vulnerability to obtain some information of the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-2
nalyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170614-01-smartphone-en - http://www.securityfocus.com/bid/102190
CVE ID: CVE-2017-8217 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-17T01:11:20.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
CVE ID: CVE-2017-8218 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-16T18:34:45.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
CVE ID: CVE-2017-8219 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-16T21:58:08.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
CVE ID: CVE-2017-8220 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-17T00:56:29.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP POST data. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
CVE ID: CVE-2017-8221 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-16T17:59:05.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#cloud - http://seclists.org/fulldisclosure/2017/Mar/23
CVE ID: CVE-2017-8222 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-17T04:04:06.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#rsa-lulz - http://seclists.org/fulldisclosure/2017/Mar/23
CVE ID: CVE-2017-8223 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-16T16:38:01.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead - http://seclists.org/fulldisclosure/2017/Mar/23
CVE ID: CVE-2017-8224 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-16T22:19:52.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#backdoor-account - http://seclists.org/fulldisclosure/2017/Mar/23
CVE ID: CVE-2017-8225 State: PUBLISHED Published: 2017-04-25T20:00:00Z Last Updated: 2024-09-17T03:08:33.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead - http://seclists.org/fulldisclosure/2017/Mar/23
CVE ID: CVE-2017-8226 State: PUBLISHED Published: 2019-07-03T19:25:16 Last Updated: 2024-08-05T16:27:23.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that sets up the default credentials on the device
older. The binary "sonia" is the one that has the vulnerable function that sets up the default credentials on the device. If one opens this binary in IDA-pro, one will notice that this follows a ARM little endian format. The function sub_3DB2FC in IDA pro is identified to be setting up the values at address 0x003DB5A6. The sub_5C057C then sets this value and adds it to the Configuration files in /mnt/mtd/Config/Account1 file. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/bl
/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-8227 State: PUBLISHED Published: 2019-07-03T19:33:10 Last Updated: 2024-08-05T16:27:22.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification (which is supported by the same binary) then there is no account lockout or timeout executed. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version V2.420.AC00.16.
to circumvent the account protection mechanism and brute force the credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the ONVIF specification. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 00671618 in IDA pro is parses the WSSE security token header. The sub_ 603D8 then performs the authentication check and if
71618 in IDA pro is parses the WSSE security token header. The sub_ 603D8 then performs the authentication check and if it is incorrect passes to the function sub_59F4C which prints the value "Sender not authorized." Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-8228 State: PUBLISHED Published: 2019-07-03T19:37:45 Last Updated: 2024-08-05T16:27:23.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the serial number of the camera. This can allow an attacker who knows the serial number to easily add another user's camera to an attacker's cloud account and control it completely. This is possible in case of any camera that is currently
mera to an attacker's cloud account and control it completely. This is possible in case of any camera that is currently not a part of an Amcrest cloud account or has been removed from the user's cloud account. Also, another requirement for a successful attack is that the user should have rebooted the camera in the last two hours. However, both of these conditions are very likely for new cameras that are sold over the Internet at many ecommerce websites or vendors that sell the Amcrest products. The successful attack results in an attacker being able to completely control the camera which includes being able to view and listen on what the camera can see, being able to change the motion detect
e camera which includes being able to view and listen on what the camera can see, being able to change the motion detection settings and also be able to turn the camera off without the user being aware of it. Note: The same attack can be executed using the Amcrest Cloud mobile application. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-8229 State: PUBLISHED Published: 2019-07-03T19:21:42 Last Updated: 2024-08-05T16:27:23.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that sets up the default credentials on the device. If one opens this binary in IDA-pro one will notice tha
ble function that sets up the default credentials on the device. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function sub_436D6 in IDA pro is identified to be setting up the configuration for the device. If one scrolls to the address 0x000437C2 then one can see that /current_config is being set as an ALIAS for /mnt/mtd/Config folder on the device. If one TELNETs into the device and navigates to /mnt/mtd/Config folder, one can observe that it contains various files such as Account1, Account2, SHAACcount1, etc. This means that if one navigates to http://[IPofcamera]/current_config/Sha1Account1 then one should be able to view the content
ans that if one navigates to http://[IPofcamera]/current_config/Sha1Account1 then one should be able to view the content of the files. The security researchers assumed that this was only possible only after authentication to the device. However, when unauthenticated access tests were performed for the same URL as provided above, it was observed that the device file could be downloaded without any authentication. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcr
21S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-8230 State: PUBLISHED Published: 2019-07-03T19:30:09 Last Updated: 2024-08-05T16:27:22.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrative interface of the device can add a new administrative user to the interface using HTTP APIs provided by the device and perform all the actions as an administrative user by using that account. If the firmware version V2.420.AC00.16.R 9
and perform all the actions as an administrative user by using that account. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable functions that performs the various action described in HTTP APIs. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 0x00429084 in IDA pro is the one that processes the HTTP API request for "addUser" action. If one traces the calls to this function, it can be cle
he one that processes the HTTP API request for "addUser" action. If one traces the calls to this function, it can be clearly seen that the function sub_ 41F38C at address 0x0041F588 parses the call received from the browser and passes it to the "addUser" function without any authorization check. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-8232 State: REJECTED Published: 2021-11-23T19:58:42 Last Updated: 2021-11-23T19:58:42 Description: No description available.
CVE ID: CVE-2017-8233 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T16:27:23.146Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Validation of Array Index in Camera Description: In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-8234 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T16:27:22.914Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Over-read Vulnerability in Camera Description: In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623