Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-25206 State: PUBLISHED Published: 2021-07-20T18:45:29 Last Updated: 2024-08-04T15:33:04.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This
/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://labs.f-secure.com/advisories/ - https://labs.f-secure.com/advisories/mimosa-ptp-devices-multiple-vulnerabilities/
CVE ID: CVE-2020-25207 State: PUBLISHED Published: 2020-11-16T15:01:02 Last Updated: 2024-08-04T15:33:05.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
CVE ID: CVE-2020-25208 State: PUBLISHED Published: 2021-02-03T15:27:12 Last Updated: 2024-08-04T15:33:05.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2020-25209 State: PUBLISHED Published: 2020-11-16T14:56:56 Last Updated: 2024-08-04T15:33:05.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
CVE ID: CVE-2020-25210 State: PUBLISHED Published: 2020-11-16T14:45:46 Last Updated: 2024-08-04T15:33:04.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
CVE ID: CVE-2020-25211 State: PUBLISHED Published: 2020-09-09T15:51:41 Last Updated: 2024-08-04T15:33:05.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/grsecurity/status/1303646421158109185 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLDYVOM4OS55HA45Y3UEVLDHYGFXPZUX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL2O4JAMPJG4YMLLJ7JFDHDJRXN4RKTC/ - https://security.netapp.com/advisory/ntap-20201009-0001/ - https://www.debian.org/security/2020/dsa-4774 - https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-25212 State: PUBLISHED Published: 2020-09-09T15:52:01 Last Updated: 2024-08-04T15:33:05.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b4487b93545214a9db8cbf32e86411677b0cca21 - https://twitter.com/grsecurity/status/1303370421958578179 - https://cdn.kernel.org
b93545214a9db8cbf32e86411677b0cca21 - https://twitter.com/grsecurity/status/1303370421958578179 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3 - https://usn.ubuntu.com/4527-1/ - https://usn.ubuntu.com/4525-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html - https://usn.ubuntu.com/4578-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-25213 State: PUBLISHED Published: 2020-09-09T00:00:00.000Z Last Updated: 2025-10-21T23:35:36.713Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2
to the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-file-manager/#developers - https://github.com/w4fz5uck5/wp-file-manager-0day - https://hotforsecurity.bitdefender.com/blog/wordpress-websites-attacked-via-file-manager-plugin-vulnerability-24048.html - https://wordfence.com/blog/2020/09/700000-wordpress-users-affected-by-zero-day-vulnerability-in-file-manager-plugin/ - https://plugins.trac.wordpress.org/changeset/2373068 - https://zdnet.com/article/millions-of-wordpress-sites-are-being-probed-attac
gins.trac.wordpress.org/changeset/2373068 - https://zdnet.com/article/millions-of-wordpress-sites-are-being-probed-attacked-with-recent-plugin-bug/ - https://seravo.com/blog/0-day-vulnerability-in-wp-file-manager/ - http://packetstormsecurity.com/files/160003/WordPress-File-Manager-6.8-Remote-Code-Execution.html - http://packetstormsecurity.com/files/171650/WordPress-File-Manager-6.9-Shell-Upload.html
CVE ID: CVE-2020-25214 State: PUBLISHED Published: 2020-10-16T19:38:04 Last Updated: 2024-08-04T15:33:04.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/immunityinc/Advisories/blob/master/2020/CVE-2020-25214.pdf
CVE ID: CVE-2020-25215 State: PUBLISHED Published: 2020-09-17T00:00:00 Last Updated: 2024-08-04T15:33:05.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.yworks.com/products/yed/download - https://zigrin.com/advisories/yworks-yed-graph-editor-xml-external-entity-injection/
CVE ID: CVE-2020-25216 State: PUBLISHED Published: 2020-09-17T00:00:00 Last Updated: 2024-08-04T15:33:04.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet. Additional Analyst Notes: - CVE Program Container: References: - https://www.yworks.com/products/yed/download - https://zigrin.com/advisories/yworks-yed-graph-editor-xslt-remote-code-execution-in-xml/
CVE ID: CVE-2020-25217 State: PUBLISHED Published: 2021-03-29T16:59:06 Last Updated: 2024-08-04T15:33:05.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0001/FEYE-2021-0001.md - https://cwe.mitre.org/data/definitions/77.html
CVE ID: CVE-2020-25218 State: PUBLISHED Published: 2021-03-29T16:54:31 Last Updated: 2024-08-04T15:33:04.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0002/FEYE-2021-0002.md - https://cwe.mitre.org/data/definitions/306.html
CVE ID: CVE-2020-25219 State: PUBLISHED Published: 2020-09-09T20:30:41 Last Updated: 2024-08-04T15:33:05.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libproxy/libproxy/issues/134 - https://lists.debian.org/debian-lts-announce/2020/09/msg00012.html - https://usn.ubuntu.com/4514-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
- https://usn.ubuntu.com/4514-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF5JSONJNO64ARWRVOS6K6HSIPHEF3H2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSVZAAVHBJR3Z4MZNR55QW3OQFAS2STH/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html - https://www.debian.org/security/2020/dsa-4800
CVE ID: CVE-2020-25220 State: PUBLISHED Published: 2020-09-10T01:20:12 Last Updated: 2024-08-04T15:33:05.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868453 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=82fd2138a5ffd7e0d4320cdb669e115ee976a26e - https://www.spinics.net/lists/stable/ms
e/linux.git/commit/?h=linux-4.14.y&id=82fd2138a5ffd7e0d4320cdb669e115ee976a26e - https://www.spinics.net/lists/stable/msg405099.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.233 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.194 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.140 - https://security.netapp.com/advisory/ntap-20201001-0004/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-25221 State: PUBLISHED Published: 2020-09-10T13:39:59 Last Updated: 2024-08-04T15:33:04.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/08/4 - https://git.kernel.org/linus/9fa2d
m Container: References: - https://www.openwall.com/lists/oss-security/2020/09/08/4 - https://git.kernel.org/linus/9fa2dd946743ae6f30dc4830da19147bf100a7f2 - https://git.kernel.org/linus/8891adc61dce2a8a41fc0c23262b681c3ec4b73a - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7 - http://www.openwall.com/lists/oss-security/2020/09/10/4 - https://security.netapp.com/advisory/ntap-20201001-0003/
CVE ID: CVE-2020-25223 State: PUBLISHED Published: 2020-09-25T00:00:00.000Z Last Updated: 2025-10-21T23:35:36.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/78.html - https://community.sophos.com/b/security-blog - https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223 - http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html - https://www.s
-2020-25223 - http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html - https://www.secpod.com/blog/remote-code-execution-in-sophos-utm/
CVE ID: CVE-2020-25226 State: PUBLISHED Published: 2021-01-12T20:18:33 Last Updated: 2024-08-04T15:33:04.885Z Vendors: Siemens Products: SCALANCE X-200 switch family (incl. SIPLUS NET variants), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) Problem Types: CWE-122 Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted reques
buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf
CVE ID: CVE-2020-25228 State: PUBLISHED Published: 2020-12-14T21:05:18 Last Updated: 2024-08-04T15:33:05.634Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-306 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/p
his port. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25229 State: PUBLISHED Published: 2020-12-14T21:05:18 Last Updated: 2024-08-04T15:33:05.473Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-321 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pd
device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25230 State: PUBLISHED Published: 2020-12-14T21:05:18 Last Updated: 2024-08-04T15:33:05.636Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-327 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25231 State: PUBLISHED Published: 2020-12-14T21:05:18 Last Updated: 2024-08-04T15:33:05.447Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants), LOGO! Soft Comfort Problem Types: CWE-321 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25232 State: PUBLISHED Published: 2020-12-14T21:05:19 Last Updated: 2024-08-04T15:33:05.326Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-327 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25233 State: PUBLISHED Published: 2020-12-14T21:05:19 Last Updated: 2024-08-04T15:33:05.472Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-321 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25234 State: PUBLISHED Published: 2020-12-14T21:05:19 Last Updated: 2024-08-04T15:33:05.332Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants), LOGO! Soft Comfort Problem Types: CWE-321 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files. Additional Analys
plays the information. An attacker could reverse engineer the UDFs directly from stored program files. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25235 State: PUBLISHED Published: 2020-12-14T21:05:19 Last Updated: 2024-08-04T15:33:05.535Z Vendors: Siemens Products: LOGO! 8 BM (incl. SIPLUS variants) Problem Types: CWE-522 Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE ID: CVE-2020-25236 State: PUBLISHED Published: 2021-03-15T17:03:30 Last Updated: 2024-10-08T08:39:39.411Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:T/RC:C) Vendors: Siemens Products: LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo Problem Types: CWE-755 Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE
n LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS
SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). The control logic (CL) the LOGO! 8 executes could be manipulated in a way that could cause the device executing the CL to improperly handle the manipulation and crash. After successful execution of the attack, the device needs to be manually reset. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-783481.pdf - https://cert-portal.siemens.com/product
: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-783481.pdf - https://cert-portal.siemens.com/productcert/html/ssa-783481.html
CVE ID: CVE-2020-25237 State: PUBLISHED Published: 2021-02-09T15:38:17 Last Updated: 2024-08-04T15:33:05.612Z Vendors: Siemens Products: SINEC NMS, SINEMA Server Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054) Additional