Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
this for all hidden user accounts) a fixed password for all devices; it can never be changed by a user. Other vulnerabilities exist that allow an attacker to get the passwords of these hidden user accounts. NOTE: the vendor reports that it has no influence on the allocation of passwords, and that global hardcoded master passwords do not exist. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitep
horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9853 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of characters. NOTE: the vendor reports that the 12-character limit provides "a very high security standard." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: -
Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9854 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:01.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports that exploitation likelihood is low because these packets are usually sent only once during installation. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Pr
oy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9855 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-10-29T13:57:15.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system. This system uses predictable codes, and a single Grid Guard code can be used on any SMA inverter. Any such code, when combined with the installer account, allows changing very sensitive parameters. NOTE: the vendor reports that Grid Guard is not an authentication feature; it is only a tracing feature. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could
n feature; it is only a tracing feature. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9856 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:01.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.sma.de/
be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9857 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be replayed, injected, or used for a man in the middle session. All functionalities available in Sunny Explorer can effectively be done from anywhere within the network as long as an attacker gets the packet setup correctly. This include
ffectively be done from anywhere within the network as long as an attacker gets the packet setup correctly. This includes the authentication process for all (including hidden) access levels and the changing of settings in accordance with the gained access rights. Furthermore, because the SMAdata2+ communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program C
ripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9858 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks (such as a brute force attack) as one now knows exactly which users exist and which do not. NOTE: the vendor's position is that this "is not a security gap per se." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: Re
1 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9859 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGISTER requests. This hashing algorithm can be cracked relatively easily. An attacker will likely be able to crack the password using offline crackers. This cracked password can then be used to register at the SMA servers. NOTE: the vendor's position is that "we consider the probability of the success of such manipulation to be extremely low." Also, only Sunny Boy TLST-21 and TL-21 and Sunn
he probability of the success of such manipulation to be extremely low." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9860 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:01.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version that is accepted by the inverter, the inverter is compromised completely. This allows the attacker to do nearly anything: for example, giving access to the local OS, creating a botnet, using the inverters as a stepping stone into companies, etc. NOTE: the vendor reports that thi
al OS, creating a botnet, using the inverters as a stepping stone into companies, etc. NOTE: the vendor reports that this attack has always been blocked by "a final integrity and compatibility check." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9861 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:01.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle attacks. An attacker is able to successfully use SIP to communicate with the device from anywhere within the LAN. An attacker may use this to crash the device, stop it from communicating with the SMA servers, exploit known SIP vulnerabilities, or find sensitive information from the SIP communications. Furthermor
he SMA servers, exploit known SIP vulnerabilities, or find sensitive information from the SIP communications. Furthermore, because the SIP communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. For example, passwords can be extracted. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-informati
Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9862 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:01.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An attacker may use this for information disclosure, or to write a file to normally unavailable locations on the local system. NOTE: the vendor reports that "the information contained in the debug report is of marginal significance." Also, onl
em. NOTE: the vendor reports that "the information contained in the debug report is of marginal significance." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9863 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters (for example, issuing a POST request to change the user password). All Sunny Explorer settings available to the authenticated user are also available to the attacker. (In some cases, this also includes changing settings that the user has no access to.) This may result in complete compromise of the device. NOTE: the v
des changing settings that the user has no access to.) This may result in complete compromise of the device. NOTE: the vendor reports that exploitation is unlikely because Sunny Explorer is used only rarely. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9864 State: PUBLISHED Published: 2017-08-05T17:00:00 Last Updated: 2024-08-05T17:18:02.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number ge
cause the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected Additional Analyst Notes: - CVE Program Container: References: - http://www.sma.de/en/statement-on-cyber-security.html - https://horusscenario.com/CVE-information/ - http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
CVE ID: CVE-2017-9865 State: PUBLISHED Published: 2017-06-25T13:00:00 Last Updated: 2024-08-05T17:18:02.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html - https://bugs.freedesktop.org/show_bug.cgi?id=100774 - https://www.debian.org/security/2018/dsa-4079 - https://secur
ml - https://bugs.freedesktop.org/show_bug.cgi?id=100774 - https://www.debian.org/security/2018/dsa-4079 - https://security.gentoo.org/glsa/201801-17 - https://usn.ubuntu.com/4042-1/
CVE ID: CVE-2017-9868 State: PUBLISHED Published: 2017-06-25T14:00:00 Last Updated: 2024-08-05T17:18:02.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/mosquitto/issues/468 - https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html
CVE ID: CVE-2017-9869 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-05T17:18:01.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99272 - https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-ii_step_one-layer2-c/ - https://www.exploit-db.com/exploits/42258/
CVE ID: CVE-2017-9870 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-05T17:18:02.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type == 2" case, a similar issue to CVE-2017-11126. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-iii_i_stereo-layer3-c/ - http://www.securityfocus.com/bid/99287
CVE ID: CVE-2017-9871 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-05T17:18:01.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99289 - https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_i_stereo-layer3-c/
CVE ID: CVE-2017-9872 State: PUBLISHED Published: 2017-06-25T19:00:00 Last Updated: 2024-08-05T17:18:01.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99270 - https://www.exploit-db.com/exploits/42259/ - https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_dequanti
xploit-db.com/exploits/42259/ - https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_dequantize_sample-layer3-c/
CVE ID: CVE-2017-9873 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:18:01.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9873 - http://www.irfanview.com/plugins.htm
CVE ID: CVE-2017-9874 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:18:01.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000007822." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9874 - http://www.irfanview.com/plugins.htm
CVE ID: CVE-2017-9875 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:18:01.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DE_Decode+0x0000000000000cdb." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.com/plugins.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9875
CVE ID: CVE-2017-9876 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:18:02.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c995." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.com/plugins.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9876
CVE ID: CVE-2017-9877 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:59.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c998." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9877 - http://www.irfanview.com/plugins.htm
CVE ID: CVE-2017-9878 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:57.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c99a." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.com/plugins.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9878
CVE ID: CVE-2017-9879 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:24:57.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a525." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9879 - http://www.irfanview.com/plugins.htm