Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32961 State: PUBLISHED Published: 2022-04-01T22:17:04.000Z Last Updated: 2025-04-16T16:34:53.745Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: MDT Software Products: MDT AutoSave, AutoSave for System Platform (A4SP), A4SP Problem Types: CWE-434 Description: A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities. Additional Analyst Notes: - CVE Program Container: - C
locations the function looks for and get execution capabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02
CVE ID: CVE-2021-32962 State: PUBLISHED Published: 2022-05-24T17:48:43.000Z Last Updated: 2025-04-16T16:18:37.959Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: AGG Software Products: Web Server (webserver.dll) Problem Types: CWE-79 Description: The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-02
CVE ID: CVE-2021-32963 State: PUBLISHED Published: 2021-09-23T13:32:36.770024Z Last Updated: 2024-09-17T01:20:36.097Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Software, LLC Products: AVEVA System Platform 2020, AVEVA InTouch 2020, AVEVA Historian 2020, AVEVA Communication Drivers Pack 2020, AVEVA Batch Management 2020, AVEVA MES 2014 Problem Types: CWE-476 Description: Null pointer dereference in SuiteLink server while processing commands 0x03/0x10 Additional Analyst Notes: - CVE Program Container: References: - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf
CVE ID: CVE-2021-32964 State: PUBLISHED Published: 2022-05-24T17:46:14.000Z Last Updated: 2025-04-16T16:18:45.845Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: AGG Software Products: Web Server (webserver.dll) Problem Types: CWE-23 Description: The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-02
CVE ID: CVE-2021-32965 State: PUBLISHED Published: 2022-05-24T17:56:01.000Z Last Updated: 2025-04-16T17:53:36.675Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAScreen Problem Types: CWE-843 Description: Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-05
CVE ID: CVE-2021-32966 State: PUBLISHED Published: 2022-05-25T13:29:03.000Z Last Updated: 2025-04-16T16:18:31.099Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Philips Products: Interoperability Solution XDS Problem Types: CWE-319 Description: Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.c
tem credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01
CVE ID: CVE-2021-32967 State: PUBLISHED Published: 2021-08-30T17:11:08 Last Updated: 2024-08-03T23:33:55.907Z Vendors: n/a Products: Delta Electronics DIAEnergie Problem Types: CWE-288 Description: Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE ID: CVE-2021-32968 State: PUBLISHED Published: 2022-04-01T22:17:12.000Z Last Updated: 2025-04-16T16:33:42.959Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Moxa Products: NPort IAW5000A-I/O Series firmware Problem Types: CWE-120 Description: Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-ser
/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities
CVE ID: CVE-2021-32969 State: PUBLISHED Published: 2022-05-24T17:58:57.000Z Last Updated: 2025-04-16T17:53:22.452Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAScreen Problem Types: CWE-787 Description: Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-05
CVE ID: CVE-2021-32970 State: PUBLISHED Published: 2022-04-01T22:17:13.000Z Last Updated: 2025-04-16T16:33:32.350Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Moxa Products: NPort IAW5000A-I/O series firmware Problem Types: CWE-20 Description: Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory
://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities
CVE ID: CVE-2021-32971 State: PUBLISHED Published: 2021-09-23T13:32:53.186735Z Last Updated: 2024-09-17T01:06:37.736Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Software, LLC Products: AVEVA System Platform 2020, AVEVA InTouch 2020, AVEVA Historian 2020, AVEVA Communication Drivers Pack 2020, AVEVA Batch Management 2020, AVEVA MES 2014 Problem Types: CWE-476 Description: Null pointer dereference in SuiteLink server while processing command 0x07 Additional Analyst Notes: - CVE Program Container: References: - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf
CVE ID: CVE-2021-32972 State: PUBLISHED Published: 2021-07-09T10:13:09 Last Updated: 2024-08-03T23:33:56.206Z Vendors: n/a Products: Panasonic FPWIN Pro Problem Types: CWE-611 Description: Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-180-03
CVE ID: CVE-2021-32974 State: PUBLISHED Published: 2022-04-01T22:17:13.000Z Last Updated: 2025-04-16T16:33:23.831Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: NPort IAW5000A-I/O series firmware Problem Types: CWE-20 Description: Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-
ries/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities
CVE ID: CVE-2021-32975 State: PUBLISHED Published: 2021-08-25T18:12:21 Last Updated: 2024-08-03T23:33:56.109Z Vendors: n/a Products: Cscape Problem Types: CWE-125 Description: Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-224-02
CVE ID: CVE-2021-32976 State: PUBLISHED Published: 2022-04-01T22:17:14.000Z Last Updated: 2025-04-16T16:33:12.438Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: NPort IAW5000A-I/O series firmware Problem Types: CWE-121 Description: Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/securit
s: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities
CVE ID: CVE-2021-32977 State: PUBLISHED Published: 2022-04-04T19:45:47.000Z Last Updated: 2025-04-16T17:57:07.061Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: AVEVA Products: AVEVA System Platform Problem Types: CWE-347 Description: AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-05 - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf
CVE ID: CVE-2021-32978 State: PUBLISHED Published: 2022-04-04T19:45:53.000Z Last Updated: 2025-04-16T16:31:49.023Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Automation Direct Products: CLICK PLC CPU Modules: C0-1x CPUs Problem Types: CWE-256 Description: The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert
0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02
CVE ID: CVE-2021-32979 State: PUBLISHED Published: 2021-09-23T13:32:59.908210Z Last Updated: 2024-09-16T20:51:41.561Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Software, LLC Products: AVEVA System Platform 2020, AVEVA InTouch 2020, AVEVA Historian 2020, AVEVA Communication Drivers Pack 2020, AVEVA Batch Management 2020, AVEVA MES 2014 Problem Types: CWE-476 Description: Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a Additional Analyst Notes: - CVE Program Container: References: - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf
CVE ID: CVE-2021-32980 State: PUBLISHED Published: 2022-04-04T19:45:52.000Z Last Updated: 2025-04-16T16:31:57.000Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Automation Direct Products: CLICK PLC CPU Modules: C0-1x CPUs Problem Types: CWE-288 Description: Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02
CVE ID: CVE-2021-32981 State: PUBLISHED Published: 2022-04-04T19:45:50.000Z Last Updated: 2025-04-16T17:56:47.168Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: AVEVA Products: AVEVA System Platform Problem Types: CWE-22 Description: AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Additional Analyst Notes: - CVE Program Cont
hname to resolve to a location that is outside of the restricted directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-05 - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf
CVE ID: CVE-2021-32982 State: PUBLISHED Published: 2022-04-04T19:45:57.000Z Last Updated: 2025-04-16T16:31:26.622Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Automation Direct Products: CLICK PLC CPU Modules: C0-1x CPUs Problem Types: CWE-319 Description: Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02
CVE ID: CVE-2021-32983 State: PUBLISHED Published: 2021-08-30T17:33:25 Last Updated: 2024-08-03T23:42:19.081Z Vendors: n/a Products: Delta Electronics DIAEnergie Problem Types: CWE-89 Description: A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.c
he context of NT SERVICE\MSSQLSERVER. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE ID: CVE-2021-32984 State: PUBLISHED Published: 2022-04-04T19:45:55.000Z Last Updated: 2025-04-16T16:31:41.100Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Automation Direct Products: CLICK PLC CPU Modules: C0-1x CPUs Problem Types: CWE-288 Description: All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ad the project without authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02
CVE ID: CVE-2021-32985 State: PUBLISHED Published: 2022-04-04T19:45:49.000Z Last Updated: 2025-04-16T17:56:55.566Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: AVEVA Products: AVEVA System Platform Problem Types: CWE-346 Description: AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-05 - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf
CVE ID: CVE-2021-32986 State: PUBLISHED Published: 2022-04-04T19:45:56.000Z Last Updated: 2025-04-16T16:31:33.851Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Automation Direct Products: CLICK PLC CPU Modules: C0-1x CPUs Problem Types: CWE-288 Description: After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly. A
hout authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-02
CVE ID: CVE-2021-32987 State: PUBLISHED Published: 2021-09-23T13:33:22.051084Z Last Updated: 2024-09-16T23:40:40.062Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Software, LLC Products: AVEVA System Platform 2020, AVEVA InTouch 2020, AVEVA Historian 2020, AVEVA Communication Drivers Pack 2020, AVEVA Batch Management 2020, AVEVA MES 2014 Problem Types: CWE-476 Description: Null pointer dereference in SuiteLink server while processing command 0x0b Additional Analyst Notes: - CVE Program Container: References: - https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf
CVE ID: CVE-2021-32988 State: PUBLISHED Published: 2021-06-29T14:50:51 Last Updated: 2024-08-03T23:42:19.083Z Vendors: n/a Products: FATEK Automation WinProladder Problem Types: CWE-787 Description: FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-175-01
CVE ID: CVE-2021-32989 State: PUBLISHED Published: 2022-05-25T13:31:36.000Z Last Updated: 2025-04-16T16:18:23.554Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Products: LAquis SCADA Problem Types: CWE-79 Description: When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04
CVE ID: CVE-2021-32990 State: PUBLISHED Published: 2021-06-29T14:50:23 Last Updated: 2024-08-03T23:42:19.117Z Vendors: n/a Products: FATEK Automation WinProladder Problem Types: CWE-125 Description: FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-175-01
CVE ID: CVE-2021-32991 State: PUBLISHED Published: 2021-08-30T17:12:38 Last Updated: 2024-08-03T23:42:18.968Z Vendors: n/a Products: Delta Electronics DIAEnergie Problem Types: CWE-352 Description: Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE ID: CVE-2021-32992 State: PUBLISHED Published: 2021-06-29T14:50:38 Last Updated: 2024-08-03T23:42:19.103Z Vendors: n/a Products: FATEK Automation WinProladder Problem Types: CWE-119 Description: FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-175-01
CVE ID: CVE-2021-32993 State: PUBLISHED Published: 2021-12-27T18:48:20.675533Z Last Updated: 2024-09-17T03:52:56.730Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Philips Products: IntelliBridge EC 40 Hub, IntelliBridge EC 80 Hub Problem Types: CWE-798 Description: IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01
CVE ID: CVE-2021-32994 State: PUBLISHED Published: 2022-04-04T19:45:58.000Z Last Updated: 2025-04-16T16:31:19.514Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Softing Products: OPC UA C++ SDK (Software Development Kit) Problem Types: CWE-119 Description: Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa
ry locations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-168-02
CVE ID: CVE-2021-32995 State: PUBLISHED Published: 2021-08-25T18:10:50 Last Updated: 2024-08-03T23:42:19.142Z Vendors: n/a Products: Cscape Problem Types: CWE-787 Description: Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-224-02