Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10040 State: PUBLISHED Published: 2020-07-14T13:18:04 Last Updated: 2024-08-04T10:50:57.835Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-916 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to retrieve some passwords in clear text. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10041 State: PUBLISHED Published: 2020-07-14T13:18:05 Last Updated: 2024-08-04T10:50:57.873Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-79 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in different locations of the web application. An attacker might be able to take over a session of a legitimate user. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10042 State: PUBLISHED Published: 2020-07-14T13:18:05 Last Updated: 2024-08-04T10:50:57.347Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-120 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might enable an attacker with access to the web application to execute arbitrary code over the network. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10043 State: PUBLISHED Published: 2020-07-14T13:18:05 Last Updated: 2024-08-04T10:50:57.402Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-80 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10044 State: PUBLISHED Published: 2020-07-14T13:18:05 Last Updated: 2024-08-04T10:50:57.807Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-306 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install specially crafted firmware to the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10045 State: PUBLISHED Published: 2020-07-14T13:18:05 Last Updated: 2024-08-04T10:50:57.932Z Vendors: Siemens AG Products: SICAM MMU, SICAM SGU, SICAM T Problem Types: CWE-294 Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE ID: CVE-2020-10048 State: PUBLISHED Published: 2021-02-09T15:38:17 Last Updated: 2024-08-04T10:50:57.903Z Vendors: Siemens Products: SIMATIC PCS 7, SIMATIC WinCC Problem Types: CWE-288 Description: A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an insecure password verification process, an attacker could bypass the password protection set on protected files, thus being granted access to the protected content, circumventing authentication. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-944678.pdf
CVE ID: CVE-2020-10049 State: PUBLISHED Published: 2020-09-09T18:06:28 Last Updated: 2024-08-04T10:50:57.883Z Vendors: Siemens AG Products: SIMATIC RTLS Locating Manager Problem Types: CWE-276 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system administrators. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-251935.pdf
CVE ID: CVE-2020-10050 State: PUBLISHED Published: 2020-09-09T18:08:43 Last Updated: 2024-08-04T10:50:57.813Z Vendors: Siemens AG Products: SIMATIC RTLS Locating Manager Problem Types: CWE-276 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-251935.pdf
CVE ID: CVE-2020-10051 State: PUBLISHED Published: 2020-09-09T18:09:58 Last Updated: 2024-08-04T10:50:57.830Z Vendors: Siemens AG Products: SIMATIC RTLS Locating Manager Problem Types: CWE-428 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to inject arbitrary commands that are execeuted instead of the legitimate service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-251935.pdf
CVE ID: CVE-2020-10052 State: PUBLISHED Published: 2021-11-09T11:31:36 Last Updated: 2024-08-04T10:50:57.284Z Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-532 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as usernames and passwords in log files. A local attacker with access to the log files could use this information to launch further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-145157.pdf
CVE ID: CVE-2020-10053 State: PUBLISHED Published: 2021-11-09T11:31:37 Last Updated: 2024-08-04T10:50:57.831Z Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-312 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as database credentials in configuration files. A local attacker with access to the configuration files could use this information to launch further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-145157.pdf
CVE ID: CVE-2020-10054 State: PUBLISHED Published: 2021-11-09T11:31:38 Last Updated: 2024-08-04T10:50:57.460Z Vendors: Siemens Products: SIMATIC RTLS Locating Manager Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration files. A local attacker could import a specially crafted file which could lead to a denial-of-service condition of the application service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-145157.pdf
CVE ID: CVE-2020-10055 State: PUBLISHED Published: 2020-08-14T15:24:06 Last Updated: 2024-08-04T10:50:57.784Z Vendors: Siemens AG Products: Desigo CC, Desigo CC Compact Problem Types: CWE-94 Description: A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the server with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https
ry commands on the server with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-786743.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-20-224-06
CVE ID: CVE-2020-10056 State: PUBLISHED Published: 2020-09-09T18:10:49 Last Updated: 2024-08-04T10:50:57.816Z Vendors: Siemens AG Products: License Management Utility (LMU) Problem Types: CWE-250 Description: A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/product
TEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-709003.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-20-252-03
CVE ID: CVE-2020-10057 State: PUBLISHED Published: 2020-03-04T18:03:36 Last Updated: 2024-08-04T10:50:57.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/J3rryBl4nks/GenixCMS/blob/master/CreateAdminBAC.md
CVE ID: CVE-2020-10058 State: PUBLISHED Published: 2020-05-11T22:26:15.962695Z Last Updated: 2024-09-17T01:36:46.714Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-20 Description: Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zephyrproject-rtos/zephyr/pull/23308 - https://zephyrprojectsec.atlassian.net/browse/ZEPSE
erences: - https://github.com/zephyrproject-rtos/zephyr/pull/23308 - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-34 - https://github.com/zephyrproject-rtos/zephyr/pull/23748 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10058
CVE ID: CVE-2020-10059 State: PUBLISHED Published: 2020-05-11T22:26:16.442001Z Last Updated: 2024-09-17T02:07:14.701Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-295 Description: The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.ne
d later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-36 - https://github.com/zephyrproject-rtos/zephyr/pull/24954 - https://github.com/zephyrproject-rtos/zephyr/pull/24999 - https://github.com/zephyrproject-rtos/zephyr/pull/24997 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10059
CVE ID: CVE-2020-10060 State: PUBLISHED Published: 2020-05-11T22:26:16.934239Z Last Updated: 2024-09-16T23:31:11.924Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-119 Description: In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This iss
k. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-37 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10060 - https://github.com/zephyrproject-rtos/zephyr/pull/27865 - https://github.com/zephyrproject-rtos/zephyr/pull/27889 - https://github.com/zephyrproject-rtos/zephyr/pull/27891 - https://github.com/zephyrproject-rtos/zephyr/pull/27893
CVE ID: CVE-2020-10061 State: PUBLISHED Published: 2020-06-05T17:37:37.217822Z Last Updated: 2024-09-16T22:52:07.253Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-119 Description: Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-75 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-20
yrprojectsec.atlassian.net/browse/ZEPSEC-75 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10061 - https://github.com/zephyrproject-rtos/zephyr/pull/23516 - https://github.com/zephyrproject-rtos/zephyr/pull/23517 - https://github.com/zephyrproject-rtos/zephyr/pull/23547 - https://github.com/zephyrproject-rtos/zephyr/pull/23091
CVE ID: CVE-2020-10062 State: PUBLISHED Published: 2020-06-05T17:37:37.262287Z Last Updated: 2024-09-17T00:51:36.140Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-193 Description: An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-84 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020
projectsec.atlassian.net/browse/ZEPSEC-84 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10062 - https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/11b7a37d9a0b438270421b224221d91929843de4 - https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment
CVE ID: CVE-2020-10063 State: PUBLISHED Published: 2020-06-05T17:37:37.314752Z Last Updated: 2024-09-17T04:03:51.040Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-190 Description: A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-55 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10063 - https://gith
net/browse/ZEPSEC-55 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10063 - https://github.com/zephyrproject-rtos/zephyr/pull/24435 - https://github.com/zephyrproject-rtos/zephyr/pull/24531 - https://github.com/zephyrproject-rtos/zephyr/pull/24535 - https://github.com/zephyrproject-rtos/zephyr/pull/24530
CVE ID: CVE-2020-10064 State: PUBLISHED Published: 2021-05-24T21:40:23.371097Z Last Updated: 2024-09-16T21:03:04.213Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-121, CWE-122 Description: Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/
l Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7
CVE ID: CVE-2020-10065 State: PUBLISHED Published: 2021-05-24T21:40:24.079319Z Last Updated: 2024-09-16T22:09:54.233Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-130 Description: Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c
CVE ID: CVE-2020-10066 State: PUBLISHED Published: 2021-05-24T21:40:24.776002Z Last Updated: 2024-09-17T01:41:15.160Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-476 Description: Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr
CVE ID: CVE-2020-10067 State: PUBLISHED Published: 2020-05-11T22:26:17.372048Z Last Updated: 2024-09-16T16:37:34.272Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-190 Description: A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versi
C-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27 - https://github.com/zephyrproject-rtos/zephyr/pull/23239 - https://github.com/zephyrproject-rtos/zephyr/pull/23653 - https://github.com/zephyrproject-rtos/zephyr/pull/23654 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067
CVE ID: CVE-2020-10068 State: PUBLISHED Published: 2020-06-05T17:37:37.415724Z Last Updated: 2024-09-16T17:54:11.004Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-20 Description: In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zephyrproject-rtos/zephyr/pull/23091 - https://zephyrprojectsec.atlassian.ne
Container: References: - https://github.com/zephyrproject-rtos/zephyr/pull/23091 - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-78 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10068 - https://github.com/zephyrproject-rtos/zephyr/pull/23707 - https://github.com/zephyrproject-rtos/zephyr/pull/23708 - https://github.com/zephyrproject-rtos/zephyr/pull/23964
CVE ID: CVE-2020-10069 State: PUBLISHED Published: 2021-05-24T21:40:25.468262Z Last Updated: 2024-09-16T16:27:47.675Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-233 Description: Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp
CVE ID: CVE-2020-10070 State: PUBLISHED Published: 2020-06-05T17:37:37.459802Z Last Updated: 2024-09-16T23:06:22.833Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-120, CWE-190 Description: In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment - https://zephyrprojectsec.atlassian.net
.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-85 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10070 - https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/0b39cbf3c01d7feec9d0dd7cc7e0e374b6113542
CVE ID: CVE-2020-10071 State: PUBLISHED Published: 2020-06-05T17:37:37.515923Z Last Updated: 2024-09-17T04:19:36.893Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-120, CWE-129 Description: The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment
Container: References: - https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-86 - https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10071 - https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/989c4713ba429aa5105fe476b4d629718f3e6082