Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6017 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.611Z Vendors: n/a Products: Schneider Electric Modicon M340 PLC Problem Types: CWE-400 Description: A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover. Additional Analyst Notes: - CV
quiring the operator to physically press the reset button on the PLC in order to recover. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/ - http://www.securityfocus.com/bid/96414 - https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
CVE ID: CVE-2017-6018 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.550Z Vendors: n/a Products: B. Braun Medical SpaceCom Problem Types: CWE-601 Description: An open redirect issue was discovered in B. Braun Medical SpaceCom module, which is integrated into the SpaceStation docking station: SpaceStation with SpaceCom module (integrated as part number 8713142U), software versions prior to Version 012U000040, and SpaceStation (part number 8713140U) with installed SpaceCom module (part number 8713160U), software versions prior to Version 012U000040. The web server of the affected product accepts untrusted input which could allow attackers to redirect the requ
U000040. The web server of the affected product accepts untrusted input which could allow attackers to redirect the request to an unintended URL contained within untrusted input. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-02
CVE ID: CVE-2017-6019 State: PUBLISHED Published: 2017-04-07T22:00:00 Last Updated: 2024-08-05T15:18:49.485Z Vendors: n/a Products: Schneider Electric Conext ComBox Problem Types: CWE-400 Description: An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-061-02 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-01 - http://www.securityfocus.com/bid/96543 - https://www.exploit-db.com/exploits/41537/
CVE ID: CVE-2017-6020 State: PUBLISHED Published: 2018-04-17T14:00:00Z Last Updated: 2024-09-17T04:14:47.260Z Vendors: LCDS - LeÃ£o Consultoria e Desenvolvimento de Sistemas LTDA ME Products: LAquis SCADA software Problem Types: CWE-22 Description: Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42885/ - http://www.securityfocus.com/bid/97055 - https://ics-cert.us-cert.gov/advisories/ICSA-17
xploit-db.com/exploits/42885/ - http://www.securityfocus.com/bid/97055 - https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01
CVE ID: CVE-2017-6021 State: PUBLISHED Published: 2018-05-14T14:00:00Z Last Updated: 2024-09-16T22:56:53.661Z Vendors: Schneider Electric SE Products: ClearSCADA Problem Types: CWE-20 Description: In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string
ADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96768 - https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01
CVE ID: CVE-2017-6022 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.411Z Vendors: n/a Products: BD Kiestra PerformA and KLA Journal Service Problem Types: CWE-259 Description: A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the confidentiality of limited PHI/PII information stored in the BD Kiestra Database. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA
Database. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-01 - http://www.securityfocus.com/bid/97057
CVE ID: CVE-2017-6023 State: PUBLISHED Published: 2017-03-16T03:49:00 Last Updated: 2024-08-05T15:18:49.609Z Vendors: n/a Products: Fatek Automation PLC Ethernet Module Problem Types: CWE-121 Description: An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device. Additional Analyst Notes: - CVE Program
identified, which may allow remote code execution or crash the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96892 - https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01
CVE ID: CVE-2017-6024 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T15:18:49.530Z Vendors: n/a Products: Rockwell Automation ControlLogix 5580 and CompactLogix 5380 Problem Types: CWE-400 Description: A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://i
pecific CIP-based commands to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-094-05 - http://www.securityfocus.com/bid/98309
CVE ID: CVE-2017-6025 State: PUBLISHED Published: 2017-05-19T02:43:00 Last Updated: 2024-08-05T15:18:49.399Z Vendors: n/a Products: 3S-Smart Software Solutions GmbH CODESYS Web Server Problem Types: CWE-121 Description: A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overflow the stack buffer by providing overly long strings to functions that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then
ns that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then be able to crash the application or run arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97174 - https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02
CVE ID: CVE-2017-6026 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.435Z Vendors: n/a Products: Schneider Electric Modicon PLCs Problem Types: CWE-330 Description: A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-08
sed. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 - http://www.securityfocus.com/bid/97254 - https://www.exploit-db.com/exploits/45918/
CVE ID: CVE-2017-6027 State: PUBLISHED Published: 2017-05-19T02:43:00 Last Updated: 2024-08-05T15:18:49.577Z Vendors: n/a Products: 3S-Smart Software Solutions GmbH CODESYS Web Server Problem Types: CWE-434 Description: An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web server request may allow the upload of arbitrary files (with a dangerous type) to the CODESYS Web Server without authorization which may allow remote code execution. Additional Analyst No
erous type) to the CODESYS Web Server without authorization which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97174 - https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02
CVE ID: CVE-2017-6028 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.367Z Vendors: n/a Products: Schneider Electric Modicon PLCs Problem Types: CWE-522 Description: An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 - http://www.securityfocus.com
E Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 - http://www.securityfocus.com/bid/97254
CVE ID: CVE-2017-6029 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T15:18:49.536Z Vendors: n/a Products: Certec EDV GmbH atvise scada Problem Types: CWE-79 Description: A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A - http://www.securityfocus.com/bid/97479
CVE ID: CVE-2017-6030 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.582Z Vendors: n/a Products: Schneider Electric Modicon PLCs Problem Types: CWE-343 Description: A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.
an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 - http://www.securityfocus.com/bid/97254
CVE ID: CVE-2017-6031 State: PUBLISHED Published: 2017-05-06T00:00:00 Last Updated: 2024-08-05T15:18:49.530Z Vendors: n/a Products: Certec EDV GmbH atvise scada Problem Types: CWE-644 Description: A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A - http://www.securityfocus.com/bid/97479
CVE ID: CVE-2017-6032 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.406Z Vendors: n/a Products: Schneider Electric Modicon Modbus Protocol Problem Types: CWE-657 Description: A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 - http://www.securityfocus.com/bid/97562
CVE ID: CVE-2017-6033 State: PUBLISHED Published: 2017-04-07T22:00:00 Last Updated: 2024-08-05T15:18:49.402Z Vendors: n/a Products: Schneider Electric Interactive Graphical SCADA System Software Problem Types: CWE-427 Description: A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97389 - https://ics-cert.us-cert.gov/advisories/ICSA-17-094-01 - http://downl
rences: - http://www.securityfocus.com/bid/97389 - https://ics-cert.us-cert.gov/advisories/ICSA-17-094-01 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-01
CVE ID: CVE-2017-6034 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.398Z Vendors: n/a Products: Schneider Electric Modicon Modbus Protocol Problem Types: CWE-294 Description: An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 - http://www.securityfocus.com/bid/97562
CVE ID: CVE-2017-6035 State: PUBLISHED Published: 2017-04-27T00:00:00 Last Updated: 2024-08-05T15:18:49.405Z Vendors: n/a Products: Wecon Technologies LEVI Studio HMI Editor Problem Types: CWE-121 Description: A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when a malicious project file is run on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97639 - https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01
CVE ID: CVE-2017-6036 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.528Z Vendors: n/a Products: Belden Hirschmann GECKO Problem Types: CWE-918 Description: A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A
CVE ID: CVE-2017-6037 State: PUBLISHED Published: 2017-04-27T00:00:00 Last Updated: 2024-08-05T15:18:49.544Z Vendors: n/a Products: Wecon Technologies LEVI Studio HMI Editor Problem Types: CWE-122 Description: A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run by the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97639 - https://ics-cert.us-cert.gov/advisories/ICSA-17-103-01
CVE ID: CVE-2017-6038 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.614Z Vendors: n/a Products: Belden Hirschmann GECKO Problem Types: CWE-352 Description: A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A
CVE ID: CVE-2017-6039 State: PUBLISHED Published: 2017-06-02T14:00:00 Last Updated: 2024-08-05T15:18:49.627Z Vendors: n/a Products: Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller Problem Types: CWE-259 Description: A Use of Hard-Coded Password issue was discovered in Phoenix Broadband PowerAgent SC3 BMS, all versions prior to v6.87. Use of a hard-coded password may allow unauthorized access to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98781 - https://ics-cert.us-cert.gov/advisories/ICSA-17-152-01
CVE ID: CVE-2017-6040 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.650Z Vendors: n/a Products: Belden Hirschmann GECKO Problem Types: CWE-200 Description: An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A
CVE ID: CVE-2017-6041 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.755Z Vendors: n/a Products: Marel Food Processing Systems Problem Types: CWE-434 Description: An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above;
374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. This vulnerability allows an attacker to modify the operation and upload firmware changes without detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97388 - https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02
CVE ID: CVE-2017-6042 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.761Z Vendors: n/a Products: Sierra Wireless AirLink Raven XE and XT Problem Types: CWE-352 Description: A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a client into making an unintentional request to the web server that will be treated as an authentic request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-c
treated as an authentic request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02 - http://www.securityfocus.com/bid/98036
CVE ID: CVE-2017-6043 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-05T15:18:49.741Z Vendors: n/a Products: Trihedral VTScada Problem Types: CWE-400 Description: A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01 - http://www.securityfocus.com/bid/99066
CVE ID: CVE-2017-6044 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.645Z Vendors: n/a Products: Sierra Wireless AirLink Raven XE and XT Problem Types: CWE-285 Description: An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02 - ht
tional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02 - http://www.securityfocus.com/bid/98036
CVE ID: CVE-2017-6045 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-05T15:18:49.840Z Vendors: n/a Products: Trihedral VTScada Problem Types: CWE-548 Description: An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01 - http://www.securityfocus.com/bid/99066
CVE ID: CVE-2017-6046 State: PUBLISHED Published: 2017-06-30T02:35:00 Last Updated: 2024-08-05T15:18:49.730Z Vendors: n/a Products: Sierra Wireless AirLink Raven XE and XT Problem Types: CWE-522 Description: An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02 - http://www.securityfocus.com/bid/98036
CVE ID: CVE-2017-6047 State: PUBLISHED Published: 2019-04-02T19:39:32 Last Updated: 2024-08-05T15:18:49.663Z Vendors: Detcon Products: Sitewatch Gateway Problem Types: CWE-287 Description: Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01