Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27227 State: PUBLISHED Published: 2022-03-25T14:41:44 Last Updated: 2024-08-03T05:25:32.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers. Additional Analyst Notes: - CVE Program Container: References: - https://docs.powerdns.com/recursor/security-advisories/index.html - https://doc.powerdns.com/authoritative/security-advisories/index.html - https://docs.powerdns.com/recursor/
index.html - https://doc.powerdns.com/authoritative/security-advisories/index.html - https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html - https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html - http://www.openwall.com/lists/oss-security/2022/03/25/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEG
WEHIO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/
CVE ID: CVE-2022-27228 State: PUBLISHED Published: 2022-03-22T17:27:57 Last Updated: 2024-08-03T05:25:32.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.bitrix24.com/open/15536776/
CVE ID: CVE-2022-27229 State: PUBLISHED Published: 2023-11-14T19:04:44.747Z Last Updated: 2024-08-30T18:25:32.791Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software Problem Types: escalation of privilege, CWE-249 Description: Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2022-27230 State: PUBLISHED Published: 2022-05-05T16:09:59.156080Z Last Updated: 2024-09-17T01:15:51.928Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP APM, BIG-IP Guided Configuration (GC) Problem Types: CWE-79 Description: On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of F5 BIG-IP Guided Configuration that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached
tacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21317311
CVE ID: CVE-2022-27231 State: PUBLISHED Published: 2022-06-13T04:50:30 Last Updated: 2024-08-03T05:25:32.082Z Vendors: VeronaLabs Products: WP Statistics Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-statistics/ - https://wordpress.org/plugins/wp-statistics/#developers - https://jvn.jp/en/jp/JVN15241647/ind
/plugins/wp-statistics/ - https://wordpress.org/plugins/wp-statistics/#developers - https://jvn.jp/en/jp/JVN15241647/index.html
CVE ID: CVE-2022-27233 State: PUBLISHED Published: 2022-11-11T15:48:42.749Z Last Updated: 2025-02-05T20:52:28.158Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Quartus Prime Pro and Standard edition software Problem Types: information disclosure Description: XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel
Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html
CVE ID: CVE-2022-27234 State: PUBLISHED Published: 2023-02-16T20:00:27.657Z Last Updated: 2025-01-27T18:13:15.867Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: CVAT software maintained by Intel(R) Problem Types: information disclosure Description: Server-side request forgery in the CVAT software maintained by Intel(R) before version 2.0.1 may allow an authenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html
CVE ID: CVE-2022-27235 State: PUBLISHED Published: 2022-07-22T16:43:11.114Z Last Updated: 2025-02-20T20:16:12.700Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Supsystic Products: Social Share Buttons by Supsystic (WordPress plugin) Problem Types: CWE-264 Description: Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers - https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-b
opers - https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-broken-access-control-vulnerabilities
CVE ID: CVE-2022-27237 State: PUBLISHED Published: 2022-04-21T04:32:44 Last Updated: 2024-08-03T05:25:32.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later. Additional Analyst Notes: - CVE Program Container: References: - https://www.ni.com/en-us/support/documentation/supplemental/22/cross-
lyst Notes: - CVE Program Container: References: - https://www.ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html
CVE ID: CVE-2022-27238 State: PUBLISHED Published: 2022-06-24T15:15:22 Last Updated: 2024-08-03T05:25:32.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton version 2.4.7 (or earlier) is vulnerable to stored Cross-Site Scripting (XSS) in the private chat functionality. A threat actor could inject JavaScript payload in his/her username. The payload gets executed in the browser of the victim each time the attacker sends a private message to the victim or when notification about the attacker leaving room is displayed. Additional Analyst Notes: - CVE Program Container: References: - https://www.mgm-sp.com/en/cve-2022-27238-bigbluebutton-xss/
CVE ID: CVE-2022-27239 State: PUBLISHED Published: 2022-04-27T00:00:00 Last Updated: 2024-08-03T05:25:32.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1197216 - http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba - https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765 - https://bugzilla.samba.org/show_bug.cgi?id=15025 - https://github.com/piastry/cifs-utils/
6a74e1aaa65766de91e2c1479765 - https://bugzilla.samba.org/show_bug.cgi?id=15025 - https://github.com/piastry/cifs-utils/pull/7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html - https://www.debian.org/security/2022/dsa-5157 - https://security.gentoo.org/glsa/202311-05
CVE ID: CVE-2022-27240 State: PUBLISHED Published: 2022-03-18T05:55:25 Last Updated: 2024-08-03T05:25:32.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/babelouest/glewlwyd/commit/4c5597c155bfbaf6491cf6b83479d241ae66940a - https://github.com/babelouest/glewlwyd/releases/tag/v2.6.2
CVE ID: CVE-2022-27241 State: PUBLISHED Published: 2022-04-12T09:08:00 Last Updated: 2024-08-03T05:25:32.284Z Vendors: Siemens Products: Mendix Applications using Mendix 7, Mendix Applications using Mendix 8, Mendix Applications using Mendix 9, Mendix Applications using Mendix 9 (V9.6) Problem Types: CWE-200 Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structu
(V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf
CVE ID: CVE-2022-27242 State: PUBLISHED Published: 2022-05-10T09:47:00 Last Updated: 2024-08-03T05:25:32.069Z Vendors: Siemens Products: OpenV2G Problem Types: CWE-120 Description: A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-736385.pdf
CVE ID: CVE-2022-27243 State: PUBLISHED Published: 2022-03-18T17:15:02 Last Updated: 2024-08-03T05:25:32.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion via the custom terms file setting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/8cc93687dcd68e1774b55a5c4e8125c0c8ddc288
CVE ID: CVE-2022-27244 State: PUBLISHED Published: 2022-03-18T17:14:38 Last Updated: 2024-08-03T05:25:32.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS payload in the custom auth name. This would be executed each time the administrator modifies a user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/61d4d3670593b78e4dab7a11eb620b7a372f30e6
CVE ID: CVE-2022-27245 State: PUBLISHED Published: 2022-03-18T17:14:13 Last Updated: 2024-08-03T05:25:32.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/8dcf414340c5ddedfebbc972601646d38e1d0717
CVE ID: CVE-2022-27246 State: PUBLISHED Published: 2022-03-18T17:13:58 Last Updated: 2024-08-03T05:25:32.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by default. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/08a07a38ae81f3b55d81cfcd4501ac1eb1c9c4dc
CVE ID: CVE-2022-27247 State: PUBLISHED Published: 2022-05-13T14:25:12 Last Updated: 2024-08-03T05:25:32.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference. Additional Analyst Notes: - CVE Program Container: References: - https://myses.de/#about - https://myses.de/pdf/CVE2022-27247.pdf
CVE ID: CVE-2022-27248 State: PUBLISHED Published: 2022-04-03T22:14:44 Last Updated: 2024-08-03T05:25:32.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative path when invoking the affected DownloadDwg endpoint. An attack uses the path field to CaddemServiceJS/CaddemService.svc/rest/DownloadDwg. Additional Analyst Notes: - CVE Program Container: References: - https://www.idearespa.eu - http://packetstormsecurity.com/files/166560/IdeaRE-RefTree-Path-Traversal.html
CVE ID: CVE-2022-27249 State: PUBLISHED Published: 2022-04-03T22:16:33 Last Updated: 2024-08-03T05:25:32.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource. Additional Analyst Notes: - CVE Program Container: References: - https://www.idearespa.eu - http://packetstormsecurity.com/files/166559/IdeaRE-RefTree-Shell-Upload.html
CVE ID: CVE-2022-27250 State: PUBLISHED Published: 2022-03-18T20:49:27 Last Updated: 2024-08-03T05:25:32.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/news/kryptowire-identifies-vulnerability-in-unisoc-chipset/
CVE ID: CVE-2022-27254 State: PUBLISHED Published: 2022-03-23T21:09:34 Last Updated: 2024-08-03T05:25:32.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HackingIntoYourHeart/Unoriginal-Rice-Patty - https://drive.google.com/file/d/1MtmWfBs1r6Y3JN1HpbNsZqO1GcsdgPdc/view?usp=sharing - https://github.com/nonamecoder/CVE-2022-27254 - https://news.ycombinator.com/item?id=30804702 - https://www.bleepingcomputer.com/news/securi
onamecoder/CVE-2022-27254 - https://news.ycombinator.com/item?id=30804702 - https://www.bleepingcomputer.com/news/security/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack/ - https://www.theregister.com/2022/03/25/honda_civic_hack/
CVE ID: CVE-2022-27255 State: PUBLISHED Published: 2022-08-01T11:43:25 Last Updated: 2024-08-03T05:25:32.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data. Additional Analyst Notes: - CVE Program Container: References: - https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf - https://forum.defcon.org/node/241835
CVE ID: CVE-2022-27256 State: PUBLISHED Published: 2022-04-13T13:35:40 Last Updated: 2024-08-03T05:25:32.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hubzilla.org/channel/hubzilla/ - https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a - https://volse.net/~haraldei/infosec/disclosures/hubzilla-before-7-2-multiple-vulnerabilities/
CVE ID: CVE-2022-27257 State: PUBLISHED Published: 2022-04-15T17:54:57 Last Updated: 2024-08-03T05:25:32.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hubzilla.org/channel/hubzilla/ - https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a
CVE ID: CVE-2022-27258 State: PUBLISHED Published: 2022-04-15T16:01:36 Last Updated: 2024-08-03T05:25:32.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hubzilla.org/channel/hubzilla/ - https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a
CVE ID: CVE-2022-27260 State: PUBLISHED Published: 2022-04-12T16:29:00 Last Updated: 2024-08-03T05:25:32.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://buttercms.com - https://github.com/ButterCMS/buttercms-js - https://www.youtube.com/watch?v=Tw8OhtVd-mE - https://share.getcloudapp.com/nOuR70WB
CVE ID: CVE-2022-27261 State: PUBLISHED Published: 2022-04-12T16:29:01 Last Updated: 2024-08-03T05:25:32.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/express-fileupload - https://www.youtube.com/watch?v=3ROHB3ck4tA
CVE ID: CVE-2022-27262 State: PUBLISHED Published: 2022-04-12T16:29:02 Last Updated: 2024-08-03T05:25:32.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://skipper.com - https://www.youtube.com/watch?v=cA7G2kidTF4
CVE ID: CVE-2022-27263 State: PUBLISHED Published: 2022-04-12T16:29:02 Last Updated: 2024-08-03T05:25:32.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strapi/strapi - https://www.youtube.com/watch?v=LEeabouqRrg
CVE ID: CVE-2022-27268 State: PUBLISHED Published: 2022-04-10T20:24:00 Last Updated: 2024-08-03T05:25:32.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27269 State: PUBLISHED Published: 2022-04-10T20:24:00 Last Updated: 2024-08-03T05:25:32.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing
CVE ID: CVE-2022-27270 State: PUBLISHED Published: 2022-04-10T20:23:59 Last Updated: 2024-08-03T05:25:32.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets. This vulnerability is triggered via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28RCE%29.pdf - https://drive.google.com/drive/folders/1zJ2dGrKar-WTlYz13v1f0BIsoIm3aU0l?usp=sharing