alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-6859 (published 2020-01-13)
Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-639
Affected vendors: ultimatemember
Affected products: ultimate_member
CVE-2020-6860 (published 2020-01-13)
libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fedoraproject, symonics
Affected products: fedora, libmysofa
CVE-2020-6861 (published 2020-05-06)
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: ledger
Affected products: monero, nano_s, nano_x
CVE-2020-6862 (published 2020-01-17)
V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-669
Affected vendors: zte
Affected products: f6x2w, f6x2w_firmware
CVE-2020-6863 (published 2020-02-27)
ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: zte
Affected products: e8820v3, e8820v3_firmware
CVE-2020-6864 (published 2020-02-27)
ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: zte
Affected products: e8820v3, e8820v3_firmware
CVE-2020-6865 (published 2020-04-30)
ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: zte
Affected products: oscp
CVE-2020-6866 (published 2020-04-30)
A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a specific command. This affects: ZXCTN 6500 version V2.10.00R3B87.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: zte
Affected products: zxctn_6500, zxctn_6500_firmware
CVE-2020-6867 (published 2020-04-30)
ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions V16.19.10P02SP002 and V16.19.10P02SP005.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: zte
Affected products: zenic_one_r22b
CVE-2020-6868 (published 2020-06-01)
There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: zte
Affected products: f680, f680_firmware
CVE-2020-6869 (published 2020-06-17)
All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: zte
Affected products: ztemarket_apk
CVE-2020-6870 (published 2020-06-24)
The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network management system and equipment. This affects: NetNumenU31R20 V12.17.20T115
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: zte
Affected products: netnumen_u31_r10, netnumen_u31_r10_firmware
CVE-2020-6871 (published 2020-07-20)
The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects: <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: zte
Affected products: r5300g4, r5300g4_firmware, r5500g4, r5500g4_firmware, r8500g4, r8500g4_firmware
CVE-2020-6872 (published 2020-07-20)
The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zte
Affected products: r5300g4, r5300g4_firmware, r5500g4, r5500g4_firmware, r8500g4, r8500g4_firmware
CVE-2020-6873 (published 2020-09-01)
A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected vendors: zte
Affected products: zxr10_2800-4_almpufb\(low\), zxr10_2800-4_almpufb\(low\)_firmware
CVE-2020-6874 (published 2020-09-01)
A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-327
Affected vendors: zte
Affected products: zxiptv, zxiptv_firmware
CVE-2020-6875 (published 2020-10-05)
A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: zte
Affected products: zxone_19700_snpe, zxone_19700_snpe_firmware
CVE-2020-6876 (published 2020-10-26)
A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the attacker could use the vulnerability to steal user cookies or destroy the page structure. This affects: eVDC ZXCLOUD-iROSV6.03.04
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zte
Affected products: evdc
CVE-2020-6877 (published 2020-11-05)
A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: zte
Affected products: zxa10_eodn, zxa10_eodn_firmware
CVE-2020-6879 (published 2020-11-19)
Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule configuration interface. The WEB service backend fails to effectively verify the abnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects: ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. This is fixed in ZXHN Z500 V1.0.1.1B1.1000 and ZXHN F670L V1.1.10P2N2.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-20
Affected vendors: zte
Affected products: zxhn_f670l, zxhn_f670l_firmware, zxhn_z500, zxhn_z500_firmware
CVE-2020-6880 (published 2020-12-01)
A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before MIPS_A_1022IPV6R3T6P7Y20.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: zte
Affected products: zxv10_w908, zxv10_w908_firmware
CVE-2020-6881 (published 2020-12-21)
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-346
Affected vendors: zte
Affected products: zxhn_e8810, zxhn_e8810_firmware, zxhn_e8820, zxhn_e8820_firmware, zxhn_e8822, zxhn_e8822_firmware
CVE-2020-6882 (published 2020-12-21)
ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain information about other devices by sending specific topics. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: zte
Affected products: zxhn_e8810, zxhn_e8810_firmware, zxhn_e8820, zxhn_e8820_firmware, zxhn_e8822, zxhn_e8822_firmware
CVE-2020-6917 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6918 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6919 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6920 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6921 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6922 (published 2022-02-16)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: support_assistant
CVE-2020-6923 (published 2024-12-19)
The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-120
CVE-2020-6931 (published 2021-11-03)
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: print_and_scan_doctor
CVE-2020-6932 (published 2020-08-12)
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-150
Affected vendors: blackberry
Affected products: qnx_software_development_platform
CVE-2020-6933 (published 2020-10-14)
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: blackberry
Affected products: unified_endpoint_manager
CVE-2020-6937 (published 2020-05-29)
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: mulesoft
Affected products: mule_runtime
CVE-2020-6938 (published 2020-07-08)
A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: linux, microsoft, tableau
Affected products: linux_kernel, tableau_server, windows
CVE-2020-6939 (published 2020-11-23)
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: tableau
Affected products: tableau_server
CVE-2020-6948 (published 2020-01-13)
A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: hashbrowncms
Affected products: hashbrown_cms
CVE-2020-6949 (published 2020-01-13)
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: hashbrowncms
Affected products: hashbrown_cms
CVE-2020-6950 (published 2021-06-02)
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: eclipse, oracle
Affected products: banking_enterprise_default_management, banking_platform, communications_network_integrity, communications_pricing_design_center, hyperion_calculation_manager, mojarra, retail_merchandising_system, solaris_cluster, time_and_labor
CVE-2020-6954 (published 2020-01-13)
An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_folder.cgi?apply_mode=ping_server URI.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: cayintech
Affected products: smp-pro4, smp-pro4_firmware
CVE-2020-6955 (published 2020-01-13)
An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: cayintech
Affected products: smp-pro4, smp-pro4_firmware
CVE-2020-6956 (published 2020-05-19)
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in login_action.jsp.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: pcs
Affected products: dexicon_enterprise
CVE-2020-6958 (published 2020-01-14)
An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially cause denial-of-service.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: yet_another_java_service_wrapper_project
Affected products: yet_another_java_service_wrapper
CVE-2020-6959 (published 2020-01-22)
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to remotely modify deserialized data without authentication using a specially crafted web request, resulting in remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: honeywell
Affected products: hnmswvms, hnmswvms_firmware, hnmswvmslt, hnmswvmslt_firmware, maxpro_nvr_pe, maxpro_nvr_pe_firmware, maxpro_nvr_se, maxpro_nvr_se_firmware, maxpro_nvr_xe, maxpro_nvr_xe_firmware, mpnvrswxx, mpnvrswxx_firmware
CVE-2020-6960 (published 2020-01-22)
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch contain an SQL injection vulnerability that could give an attacker remote unauthenticated access to the web user interface with administrator-level privileges.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: honeywell
Affected products: hnmswvms, hnmswvms_firmware, hnmswvmslt, hnmswvmslt_firmware, maxpro_nvr_pe, maxpro_nvr_pe_firmware, maxpro_nvr_se, maxpro_nvr_se_firmware, maxpro_nvr_xe, maxpro_nvr_xe_firmware, mpnvrswxx, mpnvrswxx_firmware
CVE-2020-6961 (published 2020-01-24)
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-256
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6962 (published 2020-01-24)
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X CARESCAPE Central Station (CSCS) Versions 2.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, an input validation vulnerability exists in the web-based system configuration utility that could allow an attacker to obtain arbitrary remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_b450_monitor, carescape_b450_monitor_firmware, carescape_b650_monitor, carescape_b650_monitor_firmware, carescape_b850_monitor, carescape_b850_monitor_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6963 (published 2020-01-24)
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6964 (published 2020-01-24)
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6965 (published 2020-01-24)
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_b450_monitor, carescape_b450_monitor_firmware, carescape_b650_monitor, carescape_b650_monitor_firmware, carescape_b850_monitor, carescape_b850_monitor_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6966 (published 2020-01-24)
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an attacker to obtain remote code execution of devices on the network.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-326
Affected vendors: gehealthcare
Affected products: apexpro_telemetry_server, apexpro_telemetry_server_firmware, carescape_central_station_mai700, carescape_central_station_mai700_firmware, carescape_central_station_mas700, carescape_central_station_mas700_firmware, carescape_telemetry_server_mp100r, carescape_telemetry_server_mp100r_firmware, clinical_information_center_mp100d, clinical_information_center_mp100d_firmware, clinical_information_center_mp100r, clinical_information_center_mp100r_firmware
CVE-2020-6967 (published 2020-03-23)
In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: rockwellautomation
Affected products: factorytalk_services_platform
CVE-2020-6968 (published 2020-02-20)
Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: honeywell
Affected products: inncom_inncontrol, inncom_inncontrol_firmware
CVE-2020-6969 (published 2020-02-05)
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: automationdirect
Affected products: c-more_ea9-rhi, c-more_ea9-rhi_firmware, c-more_ea9-t10cl, c-more_ea9-t10cl_firmware, c-more_ea9-t10wcl, c-more_ea9-t10wcl_firmware, c-more_ea9-t12cl, c-more_ea9-t12cl_firmware, c-more_ea9-t15cl, c-more_ea9-t15cl-r, c-more_ea9-t15cl-r_firmware, c-more_ea9-t15cl_firmware, c-more_ea9-t6cl, c-more_ea9-t6cl-r, c-more_ea9-t6cl-r_firmware, c-more_ea9-t6cl_firmware, c-more_ea9-t7cl, c-more_ea9-t7cl-r, c-more_ea9-t7cl-r_firmware, c-more_ea9-t7cl_firmware, c-more_ea9-t8cl, c-more_ea9-t8cl_firmware
CVE-2020-6970 (published 2020-02-19)
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: emerson
Affected products: openenterprise_scada_server
CVE-2020-6971 (published 2020-03-05)
In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: emerson
Affected products: valvelink
CVE-2020-6972 (published 2020-03-24)
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-294
Affected vendors: honeywell
Affected products: notifier_webserver
CVE-2020-6973 (published 2020-02-13)
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H)
Weakness: CWE-79
Affected vendors: digi
Affected products: connectport_lts_32_mei, connectport_lts_32_mei_bios, connectport_lts_32_mei_firmware
CVE-2020-6974 (published 2020-04-07)
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: honeywell
Affected products: notifier_webserver
CVE-2020-6975 (published 2020-02-12)
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-434
Affected vendors: digi
Affected products: connectport_lts_32_mei, connectport_lts_32_mei_bios, connectport_lts_32_mei_firmware
CVE-2020-6976 (published 2020-03-18)
Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: deltaww
Affected products: cncsoft_screeneditor
CVE-2020-6977 (published 2020-02-20)
A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-693
Affected vendors: ge
Affected products: invenia_abus_scan_station, invenia_abus_scan_station_firmware, logiq_e10, logiq_e10_firmware, logiq_e9, logiq_e9_firmware, logiq_e9_with_xdclear, logiq_e9_with_xdclear_firmware, logiq_p9, logiq_p9_firmware, logiq_s7, logiq_s7_firmware, logiq_s8, logiq_s8_firmware, venue_go, venue_go_firmware, versana_essential, versana_essential_firmware, vivid_e90, vivid_e90_firmware, vivid_e95, vivid_e95_firmware, vivid_iq, vivid_iq_firmware, vivid_s70n
CVE-2020-6978 (published 2020-03-24)
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)
Weakness: CWE-477
Affected vendors: honeywell
Affected products: win-pak
CVE-2020-6979 (published 2020-03-24)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-321
Affected vendors: moxa
Affected products: eds-510e, eds-510e_firmware, eds-g516e, eds-g516e_firmware
CVE-2020-6980 (published 2020-03-16)
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-312
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware, micrologix_1400, micrologix_1400_a_firmware, micrologix_1400_b_firmware, rslogix_500
CVE-2020-6981 (published 2020-03-24)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: moxa
Affected products: eds-510e, eds-510e_firmware, eds-g516e, eds-g516e_firmware
CVE-2020-6982 (published 2020-03-24)
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-644
Affected vendors: honeywell
Affected products: win-pak
CVE-2020-6983 (published 2020-03-24)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-321
Affected vendors: moxa
Affected products: pt-7528-12msc-12tx-4gsfp-hv, pt-7528-12msc-12tx-4gsfp-hv-hv, pt-7528-12msc-12tx-4gsfp-hv-hv_firmware, pt-7528-12msc-12tx-4gsfp-hv_firmware, pt-7528-12msc-12tx-4gsfp-wv, pt-7528-12msc-12tx-4gsfp-wv-wv, pt-7528-12msc-12tx-4gsfp-wv-wv_firmware, pt-7528-12msc-12tx-4gsfp-wv_firmware, pt-7528-12mst-12tx-4gsfp-hv, pt-7528-12mst-12tx-4gsfp-hv-hv, pt-7528-12mst-12tx-4gsfp-hv-hv_firmware, pt-7528-12mst-12tx-4gsfp-hv_firmware, pt-7528-12mst-12tx-4gsfp-wv, pt-7528-12mst-12tx-4gsfp-wv-wv, pt-7528-12mst-12tx-4gsfp-wv-wv_firmware, pt-7528-12mst-12tx-4gsfp-wv_firmware, pt-7528-16msc-8tx-4gsfp-hv, pt-7528-16msc-8tx-4gsfp-hv-hv, pt-7528-16msc-8tx-4gsfp-hv-hv_firmware, pt-7528-16msc-8tx-4gsfp-hv_firmware, pt-7528-16msc-8tx-4gsfp-wv, pt-7528-16msc-8tx-4gsfp-wv-wv, pt-7528-16msc-8tx-4gsfp-wv-wv_firmware, pt-7528-16msc-8tx-4gsfp-wv_firmware, pt-7528-16mst-8tx-4gsfp-hv
CVE-2020-6984 (published 2020-03-16)
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware, micrologix_1400, micrologix_1400_a_firmware, micrologix_1400_b_firmware, rslogix_500
CVE-2020-6985 (published 2020-03-24)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: moxa
Affected products: pt-7528-12msc-12tx-4gsfp-hv, pt-7528-12msc-12tx-4gsfp-hv-hv, pt-7528-12msc-12tx-4gsfp-hv-hv_firmware, pt-7528-12msc-12tx-4gsfp-hv_firmware, pt-7528-12msc-12tx-4gsfp-wv, pt-7528-12msc-12tx-4gsfp-wv-wv, pt-7528-12msc-12tx-4gsfp-wv-wv_firmware, pt-7528-12msc-12tx-4gsfp-wv_firmware, pt-7528-12mst-12tx-4gsfp-hv, pt-7528-12mst-12tx-4gsfp-hv-hv, pt-7528-12mst-12tx-4gsfp-hv-hv_firmware, pt-7528-12mst-12tx-4gsfp-hv_firmware, pt-7528-12mst-12tx-4gsfp-wv, pt-7528-12mst-12tx-4gsfp-wv-wv, pt-7528-12mst-12tx-4gsfp-wv-wv_firmware, pt-7528-12mst-12tx-4gsfp-wv_firmware, pt-7528-16msc-8tx-4gsfp-hv, pt-7528-16msc-8tx-4gsfp-hv-hv, pt-7528-16msc-8tx-4gsfp-hv-hv_firmware, pt-7528-16msc-8tx-4gsfp-hv_firmware, pt-7528-16msc-8tx-4gsfp-wv, pt-7528-16msc-8tx-4gsfp-wv-wv, pt-7528-16msc-8tx-4gsfp-wv-wv_firmware, pt-7528-16msc-8tx-4gsfp-wv_firmware, pt-7528-16mst-8tx-4gsfp-hv
CVE-2020-6986 (published 2020-03-05)
In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: omron
Affected products: plc_cj1, plc_cj1_firmware, plc_cj2, plc_cj2_firmware
CVE-2020-6987 (published 2020-03-24)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: moxa
Affected products: pt-7528-12msc-12tx-4gsfp-hv, pt-7528-12msc-12tx-4gsfp-hv-hv, pt-7528-12msc-12tx-4gsfp-hv-hv_firmware, pt-7528-12msc-12tx-4gsfp-hv_firmware, pt-7528-12msc-12tx-4gsfp-wv, pt-7528-12msc-12tx-4gsfp-wv-wv, pt-7528-12msc-12tx-4gsfp-wv-wv_firmware, pt-7528-12msc-12tx-4gsfp-wv_firmware, pt-7528-12mst-12tx-4gsfp-hv, pt-7528-12mst-12tx-4gsfp-hv-hv, pt-7528-12mst-12tx-4gsfp-hv-hv_firmware, pt-7528-12mst-12tx-4gsfp-hv_firmware, pt-7528-12mst-12tx-4gsfp-wv, pt-7528-12mst-12tx-4gsfp-wv-wv, pt-7528-12mst-12tx-4gsfp-wv-wv_firmware, pt-7528-12mst-12tx-4gsfp-wv_firmware, pt-7528-16msc-8tx-4gsfp-hv, pt-7528-16msc-8tx-4gsfp-hv-hv, pt-7528-16msc-8tx-4gsfp-hv-hv_firmware, pt-7528-16msc-8tx-4gsfp-hv_firmware, pt-7528-16msc-8tx-4gsfp-wv, pt-7528-16msc-8tx-4gsfp-wv-wv, pt-7528-16msc-8tx-4gsfp-wv-wv_firmware, pt-7528-16msc-8tx-4gsfp-wv_firmware, pt-7528-16mst-8tx-4gsfp-hv
CVE-2020-6988 (published 2020-03-16)
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-603
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware, micrologix_1400, micrologix_1400_a_firmware, micrologix_1400_b_firmware, rslogix_500
CVE-2020-6989 (published 2020-03-24)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: moxa
Affected products: pt-7528-12msc-12tx-4gsfp-hv, pt-7528-12msc-12tx-4gsfp-hv-hv, pt-7528-12msc-12tx-4gsfp-hv-hv_firmware, pt-7528-12msc-12tx-4gsfp-hv_firmware, pt-7528-12msc-12tx-4gsfp-wv, pt-7528-12msc-12tx-4gsfp-wv-wv, pt-7528-12msc-12tx-4gsfp-wv-wv_firmware, pt-7528-12msc-12tx-4gsfp-wv_firmware, pt-7528-12mst-12tx-4gsfp-hv, pt-7528-12mst-12tx-4gsfp-hv-hv, pt-7528-12mst-12tx-4gsfp-hv-hv_firmware, pt-7528-12mst-12tx-4gsfp-hv_firmware, pt-7528-12mst-12tx-4gsfp-wv, pt-7528-12mst-12tx-4gsfp-wv-wv, pt-7528-12mst-12tx-4gsfp-wv-wv_firmware, pt-7528-12mst-12tx-4gsfp-wv_firmware, pt-7528-16msc-8tx-4gsfp-hv, pt-7528-16msc-8tx-4gsfp-hv-hv, pt-7528-16msc-8tx-4gsfp-hv-hv_firmware, pt-7528-16msc-8tx-4gsfp-hv_firmware, pt-7528-16msc-8tx-4gsfp-wv, pt-7528-16msc-8tx-4gsfp-wv-wv, pt-7528-16msc-8tx-4gsfp-wv-wv_firmware, pt-7528-16msc-8tx-4gsfp-wv_firmware, pt-7528-16mst-8tx-4gsfp-hv
CVE-2020-6990 (published 2020-03-16)
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-321
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware, micrologix_1400, micrologix_1400_a_firmware, micrologix_1400_b_firmware, rslogix_500
CVE-2020-6991 (published 2020-03-24)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-521
Affected vendors: moxa
Affected products: eds-510e, eds-510e_firmware, eds-g516e, eds-g516e_firmware
CVE-2020-6992 (published 2020-04-15)
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an attacker has access to an authenticated session. GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: ge
Affected products: cimplicity
CVE-2020-6993 (published 2020-03-24)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: moxa
Affected products: pt-7528-12msc-12tx-4gsfp-hv, pt-7528-12msc-12tx-4gsfp-hv-hv, pt-7528-12msc-12tx-4gsfp-hv-hv_firmware, pt-7528-12msc-12tx-4gsfp-hv_firmware, pt-7528-12msc-12tx-4gsfp-wv, pt-7528-12msc-12tx-4gsfp-wv-wv, pt-7528-12msc-12tx-4gsfp-wv-wv_firmware, pt-7528-12msc-12tx-4gsfp-wv_firmware, pt-7528-12mst-12tx-4gsfp-hv, pt-7528-12mst-12tx-4gsfp-hv-hv, pt-7528-12mst-12tx-4gsfp-hv-hv_firmware, pt-7528-12mst-12tx-4gsfp-hv_firmware, pt-7528-12mst-12tx-4gsfp-wv, pt-7528-12mst-12tx-4gsfp-wv-wv, pt-7528-12mst-12tx-4gsfp-wv-wv_firmware, pt-7528-12mst-12tx-4gsfp-wv_firmware, pt-7528-16msc-8tx-4gsfp-hv, pt-7528-16msc-8tx-4gsfp-hv-hv, pt-7528-16msc-8tx-4gsfp-hv-hv_firmware, pt-7528-16msc-8tx-4gsfp-hv_firmware, pt-7528-16msc-8tx-4gsfp-wv, pt-7528-16msc-8tx-4gsfp-wv-wv, pt-7528-16msc-8tx-4gsfp-wv-wv_firmware, pt-7528-16msc-8tx-4gsfp-wv_firmware, pt-7528-16mst-8tx-4gsfp-hv
CVE-2020-6994 (published 2020-04-03)
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-12
Affected vendors: belden
Affected products: hirschmann_eagle20, hirschmann_eagle30, hirschmann_embedded_ethernet_switch, hirschmann_embedded_ethernet_switch_extended, hirschmann_greyhound_swtich, hirschmann_hios, hirschmann_hisecos, hirschmann_mice_switch_power, hirschmann_octopus, hirschmann_prp_redbox, hirschmann_rail_switch_power, hirschmann_rail_switch_power_enhanced, hirschmann_rail_switch_power_lite, hirschmann_rail_switch_power_smart