Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-52545 State: PUBLISHED Published: 2024-12-03T17:20:45.858Z Last Updated: 2024-12-03T21:02:16.869Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Lorex Products: 2K Indoor Wi-Fi Security Camera Problem Types: CWE-125 Description: An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sfewer-r7/LorexExploit - https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
CVE ID: CVE-2024-52546 State: PUBLISHED Published: 2024-12-03T17:23:01.246Z Last Updated: 2024-12-03T21:03:10.700Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Lorex Products: 2K Indoor Wi-Fi Security Camera Problem Types: CWE-476 Description: An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sfewer-r7/LorexExploit - https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
CVE ID: CVE-2024-52547 State: PUBLISHED Published: 2024-12-03T17:25:31.962Z Last Updated: 2025-09-05T08:31:14.731Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lorex Products: 2K Indoor Wi-Fi Security Camera Problem Types: CWE-121 Description: An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sfewer-r7/LorexExploit - https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
CVE ID: CVE-2024-52548 State: PUBLISHED Published: 2024-12-03T17:29:59.241Z Last Updated: 2024-12-03T21:04:00.985Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lorex Products: 2K Indoor Wi-Fi Security Camera Problem Types: CWE-345 Description: An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sfewer-r7/LorexExploit - https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-securi
: - https://github.com/sfewer-r7/LorexExploit - https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
CVE ID: CVE-2024-52549 State: PUBLISHED Published: 2024-11-13T20:53:00.291Z Last Updated: 2024-11-13T21:35:30.700Z Vendors: Jenkins Project Products: Jenkins Script Security Plugin Description: Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3447
CVE ID: CVE-2024-52550 State: PUBLISHED Published: 2024-11-13T20:53:00.972Z Last Updated: 2024-11-26T14:45:03.205Z Vendors: Jenkins Project Products: Jenkins Pipeline: Groovy Plugin Description: Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362
CVE ID: CVE-2024-52551 State: PUBLISHED Published: 2024-11-13T20:53:01.666Z Last Updated: 2024-11-14T15:05:27.789Z Vendors: Jenkins Project Products: Jenkins Pipeline: Declarative Plugin Description: Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361
CVE ID: CVE-2024-52552 State: PUBLISHED Published: 2024-11-13T20:53:02.325Z Last Updated: 2024-11-14T15:00:22.308Z Vendors: Jenkins Project Products: Jenkins Authorize Project Plugin Description: Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3010
CVE ID: CVE-2024-52553 State: PUBLISHED Published: 2024-11-13T20:53:02.980Z Last Updated: 2024-11-13T21:38:06.118Z Vendors: Jenkins Project Products: Jenkins OpenId Connect Authentication Plugin Description: Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3473
CVE ID: CVE-2024-52554 State: PUBLISHED Published: 2024-11-13T20:53:03.613Z Last Updated: 2024-11-13T21:36:03.550Z Vendors: Jenkins Project Products: Jenkins Shared Library Version Override Plugin Description: Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3466
CVE ID: CVE-2024-52555 State: PUBLISHED Published: 2024-11-15T15:05:03.874Z Last Updated: 2024-11-15T18:56:12.581Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: JetBrains Products: WebStorm Problem Types: CWE-349 Description: In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-52557 State: PUBLISHED Published: 2025-02-27T02:18:06.603Z Last Updated: 2025-10-01T19:36:41.239Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get() This patch fixes a potential integer overflow in the zynqmp_dp_rate_get() The issue comes up when the expression drm_dp_bw_code_to_link_rate(dp->test.bw_code) * 10000 is evaluated using 32-bit Now the constant is a compatible 64-bit type. Resolves coverity issues: CID 1636340 and CID 1635811 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/325d889c5403ba20a24097
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/325d889c5403ba20a24097f64c32d27ab993c2c3 - https://git.kernel.org/stable/c/67a615c5cb6dc33ed35492dc0d67e496cbe8de68
CVE ID: CVE-2024-52558 State: PUBLISHED Published: 2024-12-06T17:23:52.240Z Last Updated: 2024-12-06T20:43:59.938Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Planet Technology Products: Planet WGS-804HPT Problem Types: CWE-191 Description: The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-340-02 - https://www.planet.com.tw/en/support/downloads?method=keyword&keyword=v1.305b241111
CVE ID: CVE-2024-52559 State: PUBLISHED Published: 2025-02-27T02:18:07.106Z Last Updated: 2025-10-01T19:36:41.115Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that. Patchwork: https://patchwork.freedesktop.org/patch/624696/ Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2b99b2c4621d13bd4374ef38
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2b99b2c4621d13bd4374ef384e8f1fc188d0a5df - https://git.kernel.org/stable/c/2f1845e46c41ed500789d53dc45b383b7745c96c - https://git.kernel.org/stable/c/e43a0f1327a1ee70754f8a0de6e0262cfa3e0b87 - https://git.kernel.org/stable/c/3a47f4b439beb98e955d501c609dfd12b7836d61
CVE ID: CVE-2024-52560 State: PUBLISHED Published: 2025-02-27T02:18:07.676Z Last Updated: 2025-05-04T09:51:27.223Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() Extended the `mi_enum_attr()` function interface with an additional parameter, `struct ntfs_inode *ni`, to allow marking the inode as bad as soon as an error is detected. References: - https://git.kernel.org/stable/c/d9c699f2c4dc174940ffe8600b20c267897da155 - https://git.kernel.org/stable/c/2afd4d267e6dbaec8d3ccd4f5396cb84bc67aa2e
CVE ID: CVE-2024-52561 State: PUBLISHED Published: 2025-06-03T09:43:27.726Z Last Updated: 2025-06-03T13:18:56.981Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Parallels Desktop for Mac Problem Types: CWE-708 Description: A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation. Additional Anal
ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2123
CVE ID: CVE-2024-52564 State: PUBLISHED Published: 2024-12-05T09:41:39.909Z Last Updated: 2025-01-29T04:55:28.107Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: I-O DATA DEVICE, INC. Products: UD-LT1, UD-LT1/EX Problem Types: CWE-1242 Description: Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
tion settings of the device may be altered. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2024/11_ud-lt1/ - https://jvn.jp/en/jp/JVN46615026/
CVE ID: CVE-2024-52565 State: PUBLISHED Published: 2024-11-18T15:39:23.758Z Last Updated: 2024-12-10T13:53:58.951Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24231) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52566 State: PUBLISHED Published: 2024-11-18T15:39:25.382Z Last Updated: 2024-12-10T13:54:00.271Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24233) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52567 State: PUBLISHED Published: 2024-11-18T15:39:26.910Z Last Updated: 2024-12-10T13:54:01.572Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-125 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24237) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131
//cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52568 State: PUBLISHED Published: 2024-11-18T15:39:28.462Z Last Updated: 2024-12-10T13:54:02.868Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-416 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-24244) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html
s: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52569 State: PUBLISHED Published: 2024-11-18T15:39:29.963Z Last Updated: 2024-12-10T13:54:04.159Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24260) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52570 State: PUBLISHED Published: 2024-11-18T15:39:32.522Z Last Updated: 2024-12-10T13:54:05.476Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24365) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52571 State: PUBLISHED Published: 2024-11-18T15:39:34.061Z Last Updated: 2024-12-10T13:54:06.770Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24485) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52572 State: PUBLISHED Published: 2024-11-18T15:39:35.577Z Last Updated: 2024-12-10T13:54:08.165Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-121 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All
versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0005), Tecnomatix Plant Simulation V2302 (All versions < V2302.0018), Tecnomatix Plant Simulation V2404 (All versions < V2404.0007). The affected applications contain a stack based overflow vulnerability while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-24486) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-824503.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-52573 State: PUBLISHED Published: 2024-11-18T15:39:37.042Z Last Updated: 2024-12-10T13:54:09.478Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Teamcenter Visualization V2406, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All