Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22659 State: PUBLISHED Published: 2021-03-25T15:59:07 Last Updated: 2024-08-03T18:51:07.020Z Vendors: n/a Products: Rockwell Automation MicroLogix 1400 Problem Types: CWE-120 Description: Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user. Additional Analyst N
ay be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-033-01 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129877/loc/en_US#__highlight
CVE ID: CVE-2021-22660 State: PUBLISHED Published: 2021-04-27T12:26:37 Last Updated: 2024-08-03T18:51:06.014Z Vendors: n/a Products: Delta Electronics CNCSoft-B Problem Types: CWE-125 Description: CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-446/ - https://www.zerodayinitiative.com/advisories/ZDI-21-445/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05 - https://www.zerodayinitiative.com/advisories/ZDI-21-509/
CVE ID: CVE-2021-22661 State: PUBLISHED Published: 2021-02-26T14:50:52 Last Updated: 2024-08-03T18:51:06.045Z Vendors: n/a Products: ICX35-HWC-A, ICX35-HWC-E Problem Types: CWE-264 Description: Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-04
CVE ID: CVE-2021-22662 State: PUBLISHED Published: 2021-03-03T16:04:26 Last Updated: 2024-08-03T18:51:06.015Z Vendors: n/a Products: Fatek FvDesigner Problem Types: CWE-416 Description: A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
CVE ID: CVE-2021-22663 State: PUBLISHED Published: 2021-02-09T16:19:53 Last Updated: 2024-08-03T18:51:07.374Z Vendors: n/a Products: Cscape Problem Types: CWE-125 Description: Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-02
CVE ID: CVE-2021-22664 State: PUBLISHED Published: 2021-04-27T12:26:44 Last Updated: 2024-08-03T18:51:06.002Z Vendors: n/a Products: Delta Electronics CNCSoft-B Problem Types: CWE-787 Description: CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-444/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05
CVE ID: CVE-2021-22665 State: PUBLISHED Published: 2021-03-18T17:03:43 Last Updated: 2024-08-03T18:51:07.409Z Vendors: n/a Products: Rockwell Automation DriveTools SP and Drives AOP Problem Types: CWE-427 Description: Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-042-02 - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129798
CVE ID: CVE-2021-22666 State: PUBLISHED Published: 2021-03-03T16:04:42 Last Updated: 2024-08-03T18:51:06.009Z Vendors: n/a Products: Fatek FvDesigner Problem Types: CWE-121 Description: Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
CVE ID: CVE-2021-22667 State: PUBLISHED Published: 2021-02-24T16:01:33 Last Updated: 2024-08-03T18:51:06.008Z Vendors: n/a Products: BB-ESWGP506-2SFP-T Problem Types: CWE-798 Description: BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-054-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-593/
CVE ID: CVE-2021-22668 State: PUBLISHED Published: 2021-05-16T14:43:25 Last Updated: 2024-08-03T18:51:07.049Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-125 Description: Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-110-04
CVE ID: CVE-2021-22669 State: PUBLISHED Published: 2021-04-26T18:59:08 Last Updated: 2024-08-03T18:51:06.922Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-732 Description: Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-02
CVE ID: CVE-2021-22670 State: PUBLISHED Published: 2021-03-03T16:04:33 Last Updated: 2024-08-03T18:51:07.194Z Vendors: n/a Products: Fatek FvDesigner Problem Types: CWE-824 Description: An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
CVE ID: CVE-2021-22671 State: PUBLISHED Published: 2021-05-07T13:12:18 Last Updated: 2024-08-03T18:51:06.884Z Vendors: n/a Products: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Problem Types: CWE-190 Description: Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisori
1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-01
CVE ID: CVE-2021-22672 State: PUBLISHED Published: 2021-05-10T12:29:15 Last Updated: 2024-08-03T18:51:06.851Z Vendors: n/a Products: Delta Electronics CNCSoft ScreenEditor Problem Types: CWE-787 Description: Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-124-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-524/
CVE ID: CVE-2021-22673 State: PUBLISHED Published: 2021-05-07T13:21:39 Last Updated: 2024-08-03T18:51:06.977Z Vendors: n/a Products: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Problem Types: CWE-121 Description: The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Con
rior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-01
CVE ID: CVE-2021-22674 State: PUBLISHED Published: 2021-08-10T14:00:51 Last Updated: 2024-08-03T18:51:06.022Z Vendors: n/a Products: WebAccess/SCADA Problem Types: CWE-23 Description: The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE ID: CVE-2021-22675 State: PUBLISHED Published: 2021-05-07T12:01:34 Last Updated: 2024-08-03T18:51:07.108Z Vendors: n/a Products: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Problem Types: CWE-190 Description: The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - h
0 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-01
CVE ID: CVE-2021-22676 State: PUBLISHED Published: 2021-08-10T14:02:10 Last Updated: 2024-08-03T18:51:07.046Z Vendors: n/a Products: WebAccess/SCADA Problem Types: CWE-79 Description: UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE ID: CVE-2021-22677 State: PUBLISHED Published: 2021-05-07T15:11:44 Last Updated: 2024-08-03T18:51:05.995Z Vendors: n/a Products: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Problem Types: CWE-190 Description: An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: Referen
0, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-01
CVE ID: CVE-2021-22678 State: PUBLISHED Published: 2021-04-23T17:27:32 Last Updated: 2024-08-03T18:51:07.440Z Vendors: n/a Products: Cscape Problem Types: CWE-20 Description: Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01
CVE ID: CVE-2021-22679 State: PUBLISHED Published: 2021-05-07T12:46:57 Last Updated: 2024-08-03T18:51:06.025Z Vendors: n/a Products: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Problem Types: CWE-190 Description: The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.go
, CC3100 SDK v1.3.0 and prior). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-01
CVE ID: CVE-2021-22680 State: PUBLISHED Published: 2022-05-03T20:25:18.000Z Last Updated: 2025-04-16T16:24:38.678Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: NXP Products: MQX Problem Types: CWE-190 Description: NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE ID: CVE-2021-22681 State: PUBLISHED Published: 2021-03-03T17:59:43 Last Updated: 2024-08-03T18:51:06.940Z Vendors: n/a Products: Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers Problem Types: CWE-522 Description: Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLo
80; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-03
CVE ID: CVE-2021-22682 State: PUBLISHED Published: 2021-04-23T17:10:33 Last Updated: 2024-08-03T18:51:07.106Z Vendors: n/a Products: Cscape Problem Types: CWE-284 Description: Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01
CVE ID: CVE-2021-22683 State: PUBLISHED Published: 2021-03-03T16:09:21 Last Updated: 2024-08-03T18:51:07.038Z Vendors: n/a Products: Fatek FvDesigner Problem Types: CWE-787 Description: Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
CVE ID: CVE-2021-22684 State: PUBLISHED Published: 2021-08-31T16:38:19 Last Updated: 2024-08-03T18:51:07.340Z Vendors: n/a Products: Tizen RT RTOS Problem Types: CWE-190 Description: Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04
CVE ID: CVE-2021-22685 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-04-16T16:09:02.170Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Cassia Networks Products: Access Controller Problem Types: CWE-22 Description: An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-02 - https://www.cassianetworks.com/support/knowledge-base/
CVE ID: CVE-2021-22686 State: REJECTED Published: 2022-03-03T21:08:34 Last Updated: 2022-03-03T21:08:34 Description: No description available.
CVE ID: CVE-2021-22687 State: REJECTED Published: 2022-03-03T21:08:36 Last Updated: 2022-03-03T21:08:36 Description: No description available.
CVE ID: CVE-2021-22688 State: REJECTED Published: 2022-03-03T21:08:37 Last Updated: 2022-03-03T21:08:37 Description: No description available.
CVE ID: CVE-2021-22689 State: REJECTED Published: 2022-03-03T21:08:37 Last Updated: 2022-03-03T21:08:37 Description: No description available.
CVE ID: CVE-2021-22690 State: REJECTED Published: 2022-03-03T21:08:38 Last Updated: 2022-03-03T21:08:38 Description: No description available.
CVE ID: CVE-2021-22691 State: REJECTED Published: 2022-03-03T21:08:39 Last Updated: 2022-03-03T21:08:39 Description: No description available.
CVE ID: CVE-2021-22692 State: REJECTED Published: 2022-03-03T21:08:40 Last Updated: 2022-03-03T21:08:40 Description: No description available.
CVE ID: CVE-2021-22693 State: REJECTED Published: 2022-03-03T21:08:41 Last Updated: 2022-03-03T21:08:41 Description: No description available.
CVE ID: CVE-2021-22694 State: REJECTED Published: 2022-03-03T21:08:41 Last Updated: 2022-03-03T21:08:41 Description: No description available.
CVE ID: CVE-2021-22695 State: REJECTED Published: 2022-03-03T21:08:42 Last Updated: 2022-03-03T21:08:42 Description: No description available.
CVE ID: CVE-2021-22696 State: PUBLISHED Published: 2021-04-02T10:05:14.000Z Last Updated: 2025-02-13T16:27:45.767Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: CWE-918, CWE-400 Description: CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the "request_uri" parameter. CXF was not validating the "request_uri" parameter (apart from ensuring it uses "https) and was making a REST re
ameter. CXF was not validating the "request_uri" parameter (apart from ensuring it uses "https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://cxf.apache.org/security-advisories.data/CVE-2021-22696.txt.asc - https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cdev.cxf.apache.org%3E - http://www.openwall.com/lists/oss-security/
2c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cdev.cxf.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/04/02/2 - https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cusers.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r6445001cc5f9a2bb1e6316993753306e054bdd1d702656b7cbe59045%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - h
c9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-22697 State: PUBLISHED Published: 2021-01-25T17:09:26 Last Updated: 2024-08-03T18:51:07.429Z Vendors: n/a Products: EcoStruxure Power Build - Rapsody software V2.1.13 and prior. Problem Types: CWE-434 Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-012-02/ - https://www.zerodayinitiative.com/advisori
References: - https://www.se.com/ww/en/download/document/SEVD-2021-012-02/ - https://www.zerodayinitiative.com/advisories/ZDI-21-186/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01
CVE ID: CVE-2021-22698 State: PUBLISHED Published: 2021-01-25T17:10:12 Last Updated: 2024-08-03T18:51:07.283Z Vendors: n/a Products: EcoStruxure Power Build - Rapsody software V2.1.13 and prior. Problem Types: CWE-434 Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-012-02/ - https://www.zerodayinitiative.
m Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-012-02/ - https://www.zerodayinitiative.com/advisories/ZDI-21-187/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01
CVE ID: CVE-2021-22699 State: PUBLISHED Published: 2021-05-26T19:19:13 Last Updated: 2024-08-03T18:51:07.223Z Vendors: n/a Products: Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 Problem Types: CWE-20 Description: Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-05