alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-32938 (published 2021-06-17)
Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service condition or read sensitive information from memory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32939 (published 2021-08-11)
FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-3294 (published 2021-02-09)
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: casap_automated_enrollment_system_project
Affected products: casap_automated_enrollment_system
CVE-2021-32940 (published 2021-06-17)
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or read sensitive information from memory locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32941 (published 2022-05-23)
Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: annke
Affected products: n48pbb, n48pbb_firmware
CVE-2021-32942 (published 2021-06-09)
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-316
Affected vendors: aveva
Affected products: intouch_2017, intouch_2020
CVE-2021-32943 (published 2021-08-10)
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-32944 (published 2021-06-17)
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service condition or execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32945 (published 2022-04-01)
An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-326
Affected vendors: auvesy-mdt
Affected products: autosave, autosave_for_system_platform
CVE-2021-32946 (published 2021-06-17)
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-754
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32947 (published 2021-08-11)
FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-32948 (published 2021-06-17)
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32949 (published 2022-04-01)
An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-23
Affected vendors: auvesy-mdt
Affected products: autosave, autosave_for_system_platform
CVE-2021-32950 (published 2021-06-17)
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service condition or read sensitive information from memory locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32951 (published 2021-10-27)
WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-287
Affected vendors: advantech
Affected products: webaccess\/nms
CVE-2021-32952 (published 2021-06-17)
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: opendesign, siemens
Affected products: comos, drawings_sdk, jt2go, teamcenter_visualization
CVE-2021-32953 (published 2022-04-01)
An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: auvesy-mdt
Affected products: autosave, autosave_for_system_platform
CVE-2021-32954 (published 2021-06-18)
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-23
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-32955 (published 2021-08-30)
Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: deltaww
Affected products: diaenergie
CVE-2021-32956 (published 2021-06-18)
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-32957 (published 2022-04-01)
A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is therefore vulnerable to binary hijacking.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-89
Affected vendors: auvesy-mdt
Affected products: autosave, autosave_for_system_platform
CVE-2021-32958 (published 2022-05-23)
Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-288
Affected vendors: claroty
Affected products: secure_remote_access
CVE-2021-32959 (published 2021-09-23)
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: aveva
Affected products: suitelink
CVE-2021-32960 (published 2022-04-01)
Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: rockwellautomation
Affected products: factorytalk_services_platform
CVE-2021-32961 (published 2022-04-01)
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-434
Affected vendors: auvesy-mdt
Affected products: autosave, autosave_for_system_platform
CVE-2021-32962 (published 2022-05-24)
The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: aggsoft
Affected products: webserver
CVE-2021-32963 (published 2021-09-23)
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: aveva
Affected products: suitelink
CVE-2021-32964 (published 2022-05-24)
The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-23
Affected vendors: aggsoft
Affected products: webserver
CVE-2021-32965 (published 2022-05-24)
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: deltaww
Affected products: diascreen
CVE-2021-32966 (published 2022-05-25)
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: philips
Affected products: interoperability_solution_xds
CVE-2021-32967 (published 2021-08-30)
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: deltaww
Affected products: diaenergie
CVE-2021-32968 (published 2022-04-01)
Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: moxa
Affected products: nport_iaw5150a-12i\/o, nport_iaw5150a-12i\/o_firmware, nport_iaw5150a-6i\/o, nport_iaw5150a-6i\/o_firmware, nport_iaw5250a-12i\/o, nport_iaw5250a-12i\/o_firmware, nport_iaw5250a-6i\/o, nport_iaw5250a-6i\/o_firmware
CVE-2021-32969 (published 2022-05-24)
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: deltaww
Affected products: diascreen
CVE-2021-3297 (published 2021-01-26)
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: zyxel
Affected products: nbg2105, nbg2105_firmware
CVE-2021-32970 (published 2022-04-01)
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: moxa
Affected products: nport_iaw5150a-12i\/o, nport_iaw5150a-12i\/o_firmware, nport_iaw5150a-6i\/o, nport_iaw5150a-6i\/o_firmware, nport_iaw5250a-12i\/o, nport_iaw5250a-12i\/o_firmware, nport_iaw5250a-6i\/o, nport_iaw5250a-6i\/o_firmware
CVE-2021-32971 (published 2021-09-23)
Null pointer dereference in SuiteLink server while processing command 0x07
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: aveva
Affected products: suitelink
CVE-2021-32972 (published 2021-07-09)
Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: panasonic
Affected products: fpwin_pro
CVE-2021-32974 (published 2022-04-01)
Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: moxa
Affected products: nport_iaw5150a-12i\/o, nport_iaw5150a-12i\/o_firmware, nport_iaw5150a-6i\/o, nport_iaw5150a-6i\/o_firmware, nport_iaw5250a-12i\/o, nport_iaw5250a-12i\/o_firmware, nport_iaw5250a-6i\/o, nport_iaw5250a-6i\/o_firmware
CVE-2021-32975 (published 2021-08-25)
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: hornerautomation
Affected products: cscape
CVE-2021-32976 (published 2022-04-01)
Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: moxa
Affected products: nport_iaw5150a-12i\/o, nport_iaw5150a-12i\/o_firmware, nport_iaw5150a-6i\/o, nport_iaw5150a-6i\/o_firmware, nport_iaw5250a-12i\/o, nport_iaw5250a-12i\/o_firmware, nport_iaw5250a-6i\/o, nport_iaw5250a-6i\/o_firmware
CVE-2021-32977 (published 2022-04-04)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: aveva
Affected products: system_platform
CVE-2021-32978 (published 2022-04-04)
The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-256
Affected vendors: automationdirect
Affected products: c0-10are-d, c0-10are-d_firmware, c0-10dd1e-d, c0-10dd1e-d_firmware, c0-10dd2e-d, c0-10dd2e-d_firmware, c0-10dre-d, c0-10dre-d_firmware, c0-11are-d, c0-11are-d_firmware, c0-11dd1e-d, c0-11dd1e-d_firmware, c0-11dd2e-d, c0-11dd2e-d_firmware, c0-11dre-d, c0-11dre-d_firmware, c0-12are-1-d, c0-12are-1-d_firmware, c0-12are-2-d, c0-12are-2-d_firmware, c0-12are-d, c0-12are-d_firmware, c0-12dd1e-1-d, c0-12dd1e-1-d_firmware, c0-12dd1e-2-d
CVE-2021-32979 (published 2021-09-23)
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: aveva
Affected products: suitelink
CVE-2021-3298 (published 2021-01-29)
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: o-dyn
Affected products: collabtive
CVE-2021-32980 (published 2022-04-04)
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: automationdirect
Affected products: c0-10are-d, c0-10are-d_firmware, c0-10dd1e-d, c0-10dd1e-d_firmware, c0-10dd2e-d, c0-10dd2e-d_firmware, c0-10dre-d, c0-10dre-d_firmware, c0-11are-d, c0-11are-d_firmware, c0-11dd1e-d, c0-11dd1e-d_firmware, c0-11dd2e-d, c0-11dd2e-d_firmware, c0-11dre-d, c0-11dre-d_firmware, c0-12are-1-d, c0-12are-1-d_firmware, c0-12are-2-d, c0-12are-2-d_firmware, c0-12are-d, c0-12are-d_firmware, c0-12dd1e-1-d, c0-12dd1e-1-d_firmware, c0-12dd1e-2-d
CVE-2021-32981 (published 2022-04-04)
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: aveva
Affected products: system_platform
CVE-2021-32982 (published 2022-04-04)
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: automationdirect
Affected products: c0-10are-d, c0-10are-d_firmware, c0-10dd1e-d, c0-10dd1e-d_firmware, c0-10dd2e-d, c0-10dd2e-d_firmware, c0-10dre-d, c0-10dre-d_firmware, c0-11are-d, c0-11are-d_firmware, c0-11dd1e-d, c0-11dd1e-d_firmware, c0-11dd2e-d, c0-11dd2e-d_firmware, c0-11dre-d, c0-11dre-d_firmware, c0-12are-1-d, c0-12are-1-d_firmware, c0-12are-2-d, c0-12are-2-d_firmware, c0-12are-d, c0-12are-d_firmware, c0-12dd1e-1-d, c0-12dd1e-1-d_firmware, c0-12dd1e-2-d
CVE-2021-32983 (published 2021-08-30)
A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: deltaww
Affected products: diaenergie
CVE-2021-32984 (published 2022-04-04)
All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: automationdirect
Affected products: c0-10are-d, c0-10are-d_firmware, c0-10dd1e-d, c0-10dd1e-d_firmware, c0-10dd2e-d, c0-10dd2e-d_firmware, c0-10dre-d, c0-10dre-d_firmware, c0-11are-d, c0-11are-d_firmware, c0-11dd1e-d, c0-11dd1e-d_firmware, c0-11dd2e-d, c0-11dd2e-d_firmware, c0-11dre-d, c0-11dre-d_firmware, c0-12are-1-d, c0-12are-1-d_firmware, c0-12are-2-d, c0-12are-2-d_firmware, c0-12are-d, c0-12are-d_firmware, c0-12dd1e-1-d, c0-12dd1e-1-d_firmware, c0-12dd1e-2-d
CVE-2021-32985 (published 2022-04-04)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-346
Affected vendors: aveva
Affected products: system_platform
CVE-2021-32986 (published 2022-04-04)
After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: automationdirect
Affected products: c0-10are-d, c0-10are-d_firmware, c0-10dd1e-d, c0-10dd1e-d_firmware, c0-10dd2e-d, c0-10dd2e-d_firmware, c0-10dre-d, c0-10dre-d_firmware, c0-11are-d, c0-11are-d_firmware, c0-11dd1e-d, c0-11dd1e-d_firmware, c0-11dd2e-d, c0-11dd2e-d_firmware, c0-11dre-d, c0-11dre-d_firmware, c0-12are-1-d, c0-12are-1-d_firmware, c0-12are-2-d, c0-12are-2-d_firmware, c0-12are-d, c0-12are-d_firmware, c0-12dd1e-1-d, c0-12dd1e-1-d_firmware, c0-12dd1e-2-d
CVE-2021-32987 (published 2021-09-23)
Null pointer dereference in SuiteLink server while processing command 0x0b
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: aveva
Affected products: suitelink
CVE-2021-32988 (published 2021-06-29)
FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fatek
Affected products: winproladder
CVE-2021-32989 (published 2022-05-25)
When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: lcds
Affected products: laquis_scada
CVE-2021-32990 (published 2021-06-29)
FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: fatek
Affected products: winproladder
CVE-2021-32991 (published 2021-08-30)
Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-352
Affected vendors: deltaww
Affected products: diaenergie
CVE-2021-32992 (published 2021-06-29)
FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: fatek
Affected products: winproladder
CVE-2021-32993 (published 2021-12-27)
IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: philips
Affected products: intellibridge_ec40, intellibridge_ec40_firmware, intellibridge_ec80, intellibridge_ec80_firmware
CVE-2021-32994 (published 2022-04-04)
Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: softing
Affected products: opc_ua_c\+\+_software_development_kit
CVE-2021-32995 (published 2021-08-25)
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: hornerautomation
Affected products: cscape
CVE-2021-32996 (published 2022-01-10)
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-192
Affected vendors: fanuc
Affected products: r-30ia, r-30ia_firmware, r-30ia_mate, r-30ia_mate_firmware, r-30ib, r-30ib_compact, r-30ib_compact_firmware, r-30ib_compact_plus, r-30ib_compact_plus_firmware, r-30ib_firmware, r-30ib_mate, r-30ib_mate_firmware, r-30ib_mate_plus, r-30ib_mate_plus_firmware, r-30ib_mini_plus, r-30ib_mini_plus_firmware, r-30ib_plus, r-30ib_plus_firmware
CVE-2021-32997 (published 2022-05-25)
The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-916
Affected vendors: bakerhughes
Affected products: bentley_nevada_3500\/22m_\(288055-01\), bentley_nevada_3500\/22m_\(288055-01\)_firmware, bentley_nevada_3500_rack_configuration_\(129133-01\), bentley_nevada_3500_rack_configuration_\(129133-01\)_firmware, bentley_nevada_3500_system_1_6.x_\(3060\/00\), bentley_nevada_3500_system_1_6.x_\(3060\/00\)_firmware, bentley_nevada_3500_system_1_\(3071\/xx\), bentley_nevada_3500_system_1_\(3071\/xx\)_firmware, bentley_nevada_3500_system_1_\(3072\/xx\), bentley_nevada_3500_system_1_\(3072\/xx\)_firmware
CVE-2021-32998 (published 2022-01-10)
The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: fanuc
Affected products: r-30ia, r-30ia_firmware, r-30ia_mate, r-30ia_mate_firmware, r-30ib, r-30ib_compact, r-30ib_compact_firmware, r-30ib_compact_plus, r-30ib_compact_plus_firmware, r-30ib_firmware, r-30ib_mate, r-30ib_mate_firmware, r-30ib_mate_plus, r-30ib_mate_plus_firmware, r-30ib_mini_plus, r-30ib_mini_plus_firmware, r-30ib_plus, r-30ib_plus_firmware
CVE-2021-32999 (published 2021-09-23)
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: aveva
Affected products: suitelink
CVE-2021-33000 (published 2021-06-24)
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: advantech
Affected products: webaccess\/hmi_designer
CVE-2021-33001 (published 2022-05-16)
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: xarrow
Affected products: xarrow
CVE-2021-33002 (published 2021-06-24)
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: advantech
Affected products: webaccess\/hmi_designer
CVE-2021-33003 (published 2021-08-30)
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-916
Affected vendors: deltaww
Affected products: diaenergie
CVE-2021-33004 (published 2021-06-24)
The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: advantech
Affected products: webaccess\/hmi_designer
CVE-2021-33005 (published 2022-05-13)
mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: myscada
Affected products: mypro
CVE-2021-33007 (published 2021-08-30)
A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: deltaww
Affected products: tpeditor
CVE-2021-33008 (published 2022-04-04)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: aveva
Affected products: system_platform
CVE-2021-33009 (published 2022-05-13)
mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-434
Affected vendors: myscada
Affected products: mypro
CVE-2021-33010 (published 2022-04-04)
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-248
Affected vendors: aveva
Affected products: system_platform
CVE-2021-33011 (published 2021-09-10)
All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series products may not be able to properly process an ICMP flood, which may allow an attacker to deny Ethernet communications between affected devices.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-770
Affected vendors: jtekt
Affected products: 2port-efr_thu-6404, 2port-efr_thu-6404_firmware, ef10_tcu-6982, ef10_tcu-6982_firmware, fl\/et-t-v2h_thu-6289, fl\/et-t-v2h_thu-6289_firmware, nano_10gx_tuc-1157, nano_10gx_tuc-1157_firmware, nano_2et_tuu-6949, nano_2et_tuu-6949_firmware, nano_cpu_tuc-6941, nano_cpu_tuc-6941_firmware, nano_safety_rs00ip_tuu-1086, nano_safety_rs00ip_tuu-1086_firmware, nano_safety_rs01ip_tuu-1087, nano_safety_rs01ip_tuu-1087_firmware, nano_safety_tuc-1085, nano_safety_tuc-1085_firmware, pc10b-e\/c_tcu-6521, pc10b-e\/c_tcu-6521_firmware, pc10b-p_tcc-6373, pc10b-p_tcc-6373_firmware, pc10b_tcc-1021, pc10b_tcc-1021_firmware, pc10e_tcc-4637
CVE-2021-33012 (published 2021-07-09)
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware
CVE-2021-33013 (published 2022-05-13)
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: myscada
Affected products: mypro
CVE-2021-33014 (published 2022-05-26)
An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: kuka
Affected products: kr_c4, kr_c4_firmware, kss
CVE-2021-33015 (published 2021-08-25)
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: hornerautomation
Affected products: cscape
CVE-2021-33016 (published 2022-05-26)
An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: kuka
Affected products: kr_c4, kr_c4_firmware, kss
CVE-2021-33017 (published 2021-12-27)
The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: philips
Affected products: intellibridge_ec40, intellibridge_ec40_firmware, intellibridge_ec80, intellibridge_ec80_firmware
CVE-2021-33018 (published 2022-04-01)
The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: philips
Affected products: myvue, speech, vue_motion, vue_pacs
CVE-2021-33019 (published 2021-08-30)
A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: deltaww
Affected products: dopsoft
CVE-2021-33020 (published 2022-04-01)
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-324
Affected vendors: philips
Affected products: myvue, speech, vue_motion, vue_pacs
CVE-2021-33021 (published 2022-05-16)
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: xarrow
Affected products: xarrow
CVE-2021-33022 (published 2022-04-01)
Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: philips
Affected products: myvue, speech, vue_motion, vue_pacs
CVE-2021-33023 (published 2021-10-18)
Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: advantech
Affected products: webaccess
CVE-2021-33024 (published 2022-04-01)
Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: philips
Affected products: myvue, speech, vue_motion, vue_pacs
CVE-2021-33025 (published 2022-05-16)
xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-79
Affected vendors: xarrow
Affected products: xarrow
CVE-2021-33026 (published 2021-05-13)
The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can construct a crafted payload, poison the cache, and execute Python code. NOTE: a third party indicates that exploitation is extremely unlikely unless the machine is already compromised; in other cases, the attacker would be unable to write their payload to the cache and generate the required collision
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: flask-caching_project
Affected products: flask-caching
CVE-2021-33027 (published 2021-07-19)
Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-331
Affected vendors: sylabs
Affected products: singularity
CVE-2021-33031 (published 2021-06-10)
In LabCup before <v2_next_18022, it is possible to use the save API to perform unauthorized actions for users without access to user management in order to, after successful exploitation, gain access to a victim's account. A user without the user-management privilege can change another user's email address if the attacker knows details of the victim such as the exact roles and group roles, ID, and remote authentication ID settings. These must be sent in a modified save API request. It was fixed in 6.3.0.03.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-862
Affected vendors: labcup
Affected products: labcup
CVE-2021-33032 (published 2021-07-22)
A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version 2.57.5 and CCU3 firmware up to and including version 3.57.5 allows remote unauthenticated attackers to execute system commands as root via a simple HTTP request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: eq-3
Affected products: homematic_ccu2, homematic_ccu2_firmware, homematic_ccu3, homematic_ccu3_firmware
CVE-2021-33033 (published 2021-05-14)
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: linux
Affected products: linux_kernel
CVE-2021-33034 (published 2021-05-14)
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: debian, fedoraproject, linux
Affected products: debian_linux, fedora, linux_kernel
CVE-2021-33035 (published 2021-09-23)
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: apache
Affected products: openoffice
CVE-2021-33036 (published 2022-06-15)
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-24
Affected vendors: apache
Affected products: hadoop
CVE-2021-33037 (published 2021-07-12)
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-444
Affected vendors: apache, debian, mcafee, oracle
Affected products: agile_plm, communications_cloud_native_core_policy, communications_cloud_native_core_service_communication_proxy, communications_diameter_signaling_router, communications_instant_messaging_server, communications_policy_management, communications_pricing_design_center, communications_session_report_manager, communications_session_route_manager, debian_linux, epolicy_orchestrator, graph_server_and_client, healthcare_translational_research, hospitality_cruise_shipboard_property_management_system, instantis_enterprisetrack, managed_file_transfer, mysql_enterprise_monitor, sd-wan_edge, secure_global_desktop, tomcat, tomee, utilities_testing_accelerator
CVE-2021-33038 (published 2021-05-26)
An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during a large migration from Mailman 2 to Mailman 3.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: debian, hyperkitty_project
Affected products: debian_linux, hyperkitty