Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33690 State: PUBLISHED Published: 2021-09-15T18:01:41 Last Updated: 2024-08-03T23:58:22.583Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Development Infrastructure (Component Build Service) Problem Types: Server-Side Request Forgery (SSRF) Description: Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted q
Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3072955
CVE ID: CVE-2021-33691 State: PUBLISHED Published: 2021-09-15T18:01:48 Last Updated: 2024-08-03T23:58:22.507Z Severity: MEDIUM (CVSS 6.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver Development Infrastructure (Notification Service) Problem Types: Cross-Site Scripting Description: NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim has an active session when the crafted script gets executed, the threat actor cou
ted scripts to a victim. If the victim has an active session when the crafted script gets executed, the threat actor could compromise information in victims session, and gain access to some sensitive information also. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3073450
CVE ID: CVE-2021-33692 State: PUBLISHED Published: 2021-09-15T18:01:43 Last Updated: 2024-08-03T23:58:22.617Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: SAP SE Products: SAP Cloud Connector Problem Types: Code Injection via Path Traversal Description: SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://laun
CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3058553
CVE ID: CVE-2021-33693 State: PUBLISHED Published: 2021-09-15T18:01:47 Last Updated: 2024-08-03T23:58:22.364Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: SAP SE Products: SAP Cloud Connector Problem Types: CWE-94 Description: SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3058553
CVE ID: CVE-2021-33694 State: PUBLISHED Published: 2021-09-15T18:01:49 Last Updated: 2024-08-03T23:58:22.910Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: SAP SE Products: SAP Cloud Connector Problem Types: CWE-79 Description: SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - http
otes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3058553
CVE ID: CVE-2021-33695 State: PUBLISHED Published: 2021-09-15T18:01:44 Last Updated: 2024-08-03T23:58:22.261Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SAP SE Products: SAP Cloud Connector Problem Types: CWE-297 Description: Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3058553
CVE ID: CVE-2021-33696 State: PUBLISHED Published: 2021-09-15T18:01:42 Last Updated: 2024-08-03T23:58:22.430Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Crystal Report) Problem Types: Cross-Site Scripting Description: SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.s
y displayed content from a Web site. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3062085
CVE ID: CVE-2021-33697 State: PUBLISHED Published: 2021-09-15T18:01:46 Last Updated: 2024-08-03T23:58:22.378Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (SAPUI5) Problem Types: CWE-1022 Description: Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.c
er: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3063048
CVE ID: CVE-2021-33698 State: PUBLISHED Published: 2021-09-15T18:01:53 Last Updated: 2024-08-03T23:58:22.452Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Business One Problem Types: CWE-434 Description: SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3071984
CVE ID: CVE-2021-33699 State: PUBLISHED Published: 2021-08-10T14:07:53 Last Updated: 2024-08-03T23:58:22.716Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: SAP SE Products: SAP Fiori Client Native Mobile for Android Problem Types: Task Hijacking Description: Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifest.xml with their Task Control features. This allows an unauthorized attacker or malware to takeover legitimate apps and to steal user's sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3
nformation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3067219 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
CVE ID: CVE-2021-33700 State: PUBLISHED Published: 2021-09-15T18:01:51 Last Updated: 2024-08-03T23:58:22.388Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Business One Problem Types: CWE-288 Description: SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action
on. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3073325
CVE ID: CVE-2021-33701 State: PUBLISHED Published: 2021-09-15T18:01:55 Last Updated: 2024-08-03T23:58:22.494Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: DMIS Mobile Plug-In, SAP S/4HANA Problem Types: CWE-89 Description: DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated query in NDZT tool to gain access to Superuser account, leading to SQL Injection vulnerability, that highly impacts systems Confidentiality,
o gain access to Superuser account, leading to SQL Injection vulnerability, that highly impacts systems Confidentiality, Integrity and Availability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3078312 - http://seclists.org/fulldisclosure/2021/Dec/36 - http://seclists.org/fulldisclosure/2021/Dec/35 - http://packetstormsecurity.com/files/165303/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-SQL-Injection.html - http://packetstormsecurity.com/files/165304/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-ABAP-Code-Injection.html
CVE ID: CVE-2021-33702 State: PUBLISHED Published: 2021-08-10T14:08:12 Last Updated: 2024-08-03T23:58:22.503Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets executed in the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE
n the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3073681 - http://seclists.org/fulldisclosure/2022/Jan/70 - http://packetstormsecurity.com/files/165737/SAP-Enterprise-Portal-NavigationReporter-Cross-Site-Scripting.html
CVE ID: CVE-2021-33703 State: PUBLISHED Published: 2021-08-10T14:08:06 Last Updated: 2024-08-03T23:58:22.542Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal (Application Extensions) Problem Types: CWE-79 Description: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pa
Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3072920 - http://seclists.org/fulldisclosure/2022/Jan/71 - http://packetstormsecurity.com/files/165740/SAP-Enterprise-Portal-RunContentCreation-Cross-Site-Scripting.html
CVE ID: CVE-2021-33704 State: PUBLISHED Published: 2021-09-15T18:01:56 Last Updated: 2024-08-03T23:58:22.697Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SAP SE Products: SAP Business One Problem Types: CWE-862 Description: The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack, the attacker may be able to read, modify or delete restricted data. The impact is that missing authorization can result of abuse of functio
able to read, modify or delete restricted data. The impact is that missing authorization can result of abuse of functionality usually restricted to specific users. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3078072
CVE ID: CVE-2021-33705 State: PUBLISHED Published: 2021-09-15T18:01:52 Last Updated: 2024-08-03T23:58:22.822Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-918 Description: The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated attacker to craft a malicious URL which when clicked by a user can make any type of request (e.g. POST, GET) to any internal or external server. This can result in the accessing or modification of data accessible from the Portal b
o any internal or external server. This can result in the accessing or modification of data accessible from the Portal but will not affect its availability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3074844 - http://seclists.org/fulldisclosure/2022/Jan/72 - http://packetstormsecurity.com/files/165743/SAP-Enterprise-Portal-iviewCatcherEditor-Server-Side-Request-Forgery.html
CVE ID: CVE-2021-33706 State: PUBLISHED Published: 2021-08-10T14:10:54 Last Updated: 2024-08-03T23:58:22.813Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP SE Products: InfraBox Problem Types: Improper input validation Description: Due to improper input validation in InfraBox, logs can be modified by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SAP/InfraBox/security/advisories/GHSA-gw7h-9xvm-83qh
CVE ID: CVE-2021-33707 State: PUBLISHED Published: 2021-08-10T14:07:59 Last Updated: 2024-08-03T23:58:22.380Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver (Knowledge Management) Problem Types: CWE-601 Description: SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/
References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 - https://launchpad.support.sap.com/#/notes/3076399 - http://seclists.org/fulldisclosure/2022/Jan/73 - http://packetstormsecurity.com/files/165748/SAP-Enterprise-Portal-Open-Redirect.html
CVE ID: CVE-2021-33708 State: PUBLISHED Published: 2021-08-10T19:25:02 Last Updated: 2024-08-03T23:58:22.717Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: SAP SE Products: Kyma Problem Types: Improper input validation Description: Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kyma-project/kyma/security/advisories/GHSA-f2jp-5gj4-q9c9
CVE ID: CVE-2021-33709 State: PUBLISHED Published: 2021-07-13T11:03:00 Last Updated: 2024-08-03T23:58:22.839Z Vendors: Siemens Products: Teamcenter Active Workspace V4, Teamcenter Active Workspace V5.0, Teamcenter Active Workspace V5.1 Problem Types: CWE-200 Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal
not properly handled by the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
CVE ID: CVE-2021-33710 State: PUBLISHED Published: 2021-07-13T11:03:01 Last Updated: 2024-08-03T23:58:22.790Z Vendors: Siemens Products: Teamcenter Active Workspace V4, Teamcenter Active Workspace V5.0, Teamcenter Active Workspace V5.1 Problem Types: CWE-79 Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious li
evices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
CVE ID: CVE-2021-33711 State: PUBLISHED Published: 2021-07-13T11:03:02 Last Updated: 2024-08-03T23:58:22.948Z Vendors: Siemens Products: Teamcenter Active Workspace V4, Teamcenter Active Workspace V5.0, Teamcenter Active Workspace V5.1 Problem Types: CWE-209 Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). The affected application allows verbose error messages which allow leaking of sensitive information, such as full paths. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com
on, such as full paths. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
CVE ID: CVE-2021-33712 State: PUBLISHED Published: 2021-06-08T19:47:17 Last Updated: 2024-08-03T23:58:22.801Z Vendors: Siemens Products: Mendix SAML Module Problem Types: CWE-345 Description: A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-522654.pdf
CVE ID: CVE-2021-33713 State: PUBLISHED Published: 2021-07-13T11:03:03 Last Updated: 2024-08-03T23:58:22.818Z Vendors: Siemens Products: JT Utilities Problem Types: CWE-688 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leading the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE ID: CVE-2021-33714 State: PUBLISHED Published: 2021-07-13T11:03:04 Last Updated: 2024-08-03T23:58:22.579Z Vendors: Siemens Products: JT Utilities Problem Types: CWE-476 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE ID: CVE-2021-33715 State: PUBLISHED Published: 2021-07-13T11:03:05 Last Updated: 2024-08-03T23:58:22.582Z Vendors: Siemens Products: JT Utilities Problem Types: CWE-476 Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL pointer deference condition and causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pd
onal Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE ID: CVE-2021-33716 State: PUBLISHED Published: 2021-09-14T10:47:34 Last Updated: 2024-08-03T23:58:22.881Z Vendors: Siemens Products: SIMATIC CP 1543-1 (incl. SIPLUS variants), SIMATIC CP 1545-1 Problem Types: CWE-312 Description: A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions < V1.1). An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf
CVE ID: CVE-2021-33717 State: PUBLISHED Published: 2021-08-10T10:35:31 Last Updated: 2024-08-03T23:58:22.832Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-476 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemen
ondition in the application. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf