alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-3716 (published 2022-03-02)
A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-924
Affected vendors: nbdkit_project, redhat
Affected products: enterprise_linux, nbdkit
CVE-2021-37160 (published 2021-08-02)
A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation (e.g., cryptographic signature validation) during a File Upload for a firmware update.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37161 (published 2021-08-02)
A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. A buffer overflow allows an attacker to overwrite an internal queue data structure and can lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37162 (published 2021-08-02)
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy and possible remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37163 (published 2021-08-02)
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37164 (published 2021-08-02)
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37165 (published 2021-08-02)
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37166 (published 2021-08-02)
A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When HMI3 starts up, it binds a local service to a TCP port on all interfaces of the device, and takes extensive time for the GUI to connect to the TCP socket, allowing the connection to be hijacked by an external attacker.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-37167 (published 2021-08-02)
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of the functionality of the device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: swisslog-healthcare
Affected products: hmi-3_control_panel, hmi-3_control_panel_firmware
CVE-2021-3717 (published 2022-05-24)
A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-552
Affected vendors: redhat
Affected products: enterprise_linux, jboss_enterprise_application_platform, single_sign-on, wildfly_core
CVE-2021-37172 (published 2021-08-10)
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: siemens
Affected products: cpu_1211c, cpu_1212c, cpu_1212fc, cpu_1214c, cpu_1214fc, cpu_1215c, cpu_1215fc, cpu_1217c, simatic_s7-1200_cpu_firmware, simatic_step_7_\(tia_portal\)
CVE-2021-37173 (published 2021-09-14)
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The command line interface of affected devices insufficiently restrict file read and write operations for low privileged users. This could allow an authenticated remote attacker to escalate privileges and gain root access to the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: siemens
Affected products: ruggedcom_rox_mx5000, ruggedcom_rox_mx5000_firmware, ruggedcom_rox_rx1400, ruggedcom_rox_rx1400_firmware, ruggedcom_rox_rx1500, ruggedcom_rox_rx1500_firmware, ruggedcom_rox_rx1501, ruggedcom_rox_rx1501_firmware, ruggedcom_rox_rx1510, ruggedcom_rox_rx1510_firmware, ruggedcom_rox_rx1511, ruggedcom_rox_rx1511_firmware, ruggedcom_rox_rx1512, ruggedcom_rox_rx1512_firmware, ruggedcom_rox_rx1524, ruggedcom_rox_rx1524_firmware, ruggedcom_rox_rx1536, ruggedcom_rox_rx1536_firmware, ruggedcom_rox_rx5000, ruggedcom_rox_rx5000_firmware
CVE-2021-37174 (published 2021-09-14)
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-250
Affected vendors: siemens
Affected products: ruggedcom_rox_mx5000, ruggedcom_rox_mx5000_firmware, ruggedcom_rox_rx1400, ruggedcom_rox_rx1400_firmware, ruggedcom_rox_rx1500, ruggedcom_rox_rx1500_firmware, ruggedcom_rox_rx1501, ruggedcom_rox_rx1501_firmware, ruggedcom_rox_rx1510, ruggedcom_rox_rx1510_firmware, ruggedcom_rox_rx1511, ruggedcom_rox_rx1511_firmware, ruggedcom_rox_rx1512, ruggedcom_rox_rx1512_firmware, ruggedcom_rox_rx1524, ruggedcom_rox_rx1524_firmware, ruggedcom_rox_rx1536, ruggedcom_rox_rx1536_firmware, ruggedcom_rox_rx5000, ruggedcom_rox_rx5000_firmware
CVE-2021-37175 (published 2021-09-14)
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices do not properly handle permissions to traverse the file system. If exploited, an attacker could gain access to an overview of the complete file system on the affected devices.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-280
Affected vendors: siemens
Affected products: ruggedcom_rox_mx5000, ruggedcom_rox_mx5000_firmware, ruggedcom_rox_rx1400, ruggedcom_rox_rx1400_firmware, ruggedcom_rox_rx1500, ruggedcom_rox_rx1500_firmware, ruggedcom_rox_rx1501, ruggedcom_rox_rx1501_firmware, ruggedcom_rox_rx1510, ruggedcom_rox_rx1510_firmware, ruggedcom_rox_rx1511, ruggedcom_rox_rx1511_firmware, ruggedcom_rox_rx1512, ruggedcom_rox_rx1512_firmware, ruggedcom_rox_rx1524, ruggedcom_rox_rx1524_firmware, ruggedcom_rox_rx1536, ruggedcom_rox_rx1536_firmware, ruggedcom_rox_rx5000, ruggedcom_rox_rx5000_firmware
CVE-2021-37176 (published 2021-09-14)
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper validation of user-supplied data when parsing modfem files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14260)
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-125
Affected vendors: siemens
Affected products: simcenter_femap
CVE-2021-37177 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-471
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37178 (published 2021-08-10)
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: siemens
Affected products: solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-37179 (published 2021-08-10)
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13777)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: siemens
Affected products: solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-3718 (published 2021-11-12)
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-232
Affected vendors: lenovo, linux, microsoft
Affected products: linux_kernel, thinkpad_11e_3rd_gen, thinkpad_11e_3rd_gen_firmware, thinkpad_11e_4th_gen_celeron, thinkpad_11e_4th_gen_celeron_firmware, thinkpad_11e_4th_gen_i3, thinkpad_11e_4th_gen_i3_firmware, thinkpad_11e_4th_gen_i5, thinkpad_11e_4th_gen_i5_firmware, thinkpad_11e_4th_gen_i7, thinkpad_11e_4th_gen_i7_firmware, thinkpad_11e_5th_gen, thinkpad_11e_5th_gen_firmware, thinkpad_11e_yoga_gen_6, thinkpad_11e_yoga_gen_6_firmware, thinkpad_13_gen_2, thinkpad_13_gen_2_firmware, thinkpad_e490, thinkpad_e490_firmware, thinkpad_e490s, thinkpad_e490s_firmware, thinkpad_e590, thinkpad_e590_firmware, thinkpad_l13, thinkpad_l13_firmware
CVE-2021-37180 (published 2021-08-10)
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13775)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: siemens
Affected products: solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-37181 (published 2021-09-14)
A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: siemens
Affected products: cerberus_dms, desigo_cc, desigo_cc_compact
CVE-2021-37182 (published 2022-06-14)
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-354
Affected vendors: siemens
Affected products: scalance_xm408-4c, scalance_xm408-4c_firmware, scalance_xm408-4c_l3, scalance_xm408-4c_l3_firmware, scalance_xm408-8c, scalance_xm408-8c_firmware, scalance_xm408-8c_l3, scalance_xm408-8c_l3_firmware, scalance_xm416-4c, scalance_xm416-4c_firmware, scalance_xm416-4c_l3, scalance_xm416-4c_l3_firmware, scalance_xr524-8c, scalance_xr524-8c_firmware, scalance_xr524-8c_l3, scalance_xr524-8c_l3_firmware, scalance_xr526-8c, scalance_xr526-8c_firmware, scalance_xr526-8c_l3, scalance_xr526-8c_l3_firmware, scalance_xr528-6m, scalance_xr528-6m_2hr2, scalance_xr528-6m_2hr2_firmware, scalance_xr528-6m_2hr2_l3, scalance_xr528-6m_2hr2_l3_firmware
CVE-2021-37183 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a Denial-of-Service condition in the managed devices.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-284
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37184 (published 2021-09-14)
A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-639
Affected vendors: siemens
Affected products: industrial_edge_management
CVE-2021-37185 (published 2022-02-09)
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-672
Affected vendors: siemens
Affected products: simatic_drive_controller_cpu_1504d_tf, simatic_drive_controller_cpu_1504d_tf_firmware, simatic_drive_controller_cpu_1507d_tf, simatic_drive_controller_cpu_1507d_tf_firmware, simatic_et_200sp_open_controller_cpu_1515sp_pc2, simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware, simatic_s7-1200_cpu_1211c, simatic_s7-1200_cpu_1211c_firmware, simatic_s7-1200_cpu_1212c, simatic_s7-1200_cpu_1212c_firmware, simatic_s7-1200_cpu_1212fc, simatic_s7-1200_cpu_1212fc_firmware, simatic_s7-1200_cpu_1214c, simatic_s7-1200_cpu_1214c_firmware, simatic_s7-1200_cpu_1214fc, simatic_s7-1200_cpu_1214fc_firmware, simatic_s7-1200_cpu_1215c, simatic_s7-1200_cpu_1215c_firmware, simatic_s7-1200_cpu_1215fc, simatic_s7-1200_cpu_1215fc_firmware, simatic_s7-1200_cpu_1217c, simatic_s7-1200_cpu_1217c_firmware, simatic_s7-1500_cpu_1510sp, simatic_s7-1500_cpu_1510sp-1, simatic_s7-1500_cpu_1510sp-1_firmware
CVE-2021-37186 (published 2021-09-14)
A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-330
Affected vendors: siemens
Affected products: logo\!_cmr2020, logo\!_cmr2020_firmware, logo\!_cmr2040, logo\!_cmr2040_firmware, simatic_rtu3010c, simatic_rtu3010c_firmware, simatic_rtu3030c, simatic_rtu3030c_firmware, simatic_rtu3031c, simatic_rtu3031c_firmware, simatic_rtu3041c, simatic_rtu3041c_firmware
CVE-2021-37187 (published 2021-12-10)
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows decoding of other users' passwords.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: digi
Affected products: transport_dr64, transport_dr64_firmware, transport_sr44, transport_vc74, transport_vc74_firmware, transport_wr11, transport_wr11_firmware, transport_wr11_xt, transport_wr11_xt_firmware, transport_wr21, transport_wr21_firmware, transport_wr31, transport_wr31_firmware, transport_wr41, transport_wr41_firmware, transport_wr44, transport_wr44_firmware
CVE-2021-37188 (published 2021-12-10)
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-345
Affected vendors: digi
Affected products: transport_dr64, transport_dr64_firmware, transport_sr44, transport_vc74, transport_vc74_firmware, transport_wr11, transport_wr11_firmware, transport_wr11_xt, transport_wr11_xt_firmware, transport_wr21, transport_wr21_firmware, transport_wr31, transport_wr31_firmware, transport_wr41, transport_wr41_firmware, transport_wr44, transport_wr44_firmware
CVE-2021-37189 (published 2021-12-10)
An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-311
Affected vendors: digi
Affected products: transport_wr11, transport_wr11_firmware, transport_wr11_xt, transport_wr11_xt_firmware, transport_wr21, transport_wr21_firmware, transport_wr31, transport_wr31_firmware, transport_wr41, transport_wr41_firmware, transport_wr44, transport_wr44_firmware
CVE-2021-3719 (published 2021-11-12)
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: lenovo
Affected products: thinkcentre_e93, thinkcentre_e93_firmware, thinkcentre_m4500q, thinkcentre_m4500q_firmware, thinkcentre_m600, thinkcentre_m600_firmware, thinkcentre_m6500t\/s, thinkcentre_m6500t\/s_firmware, thinkcentre_m700_tiny, thinkcentre_m700_tiny_firmware, thinkcentre_m73, thinkcentre_m73_firmware, thinkcentre_m73p, thinkcentre_m73p_firmware, thinkcentre_m800, thinkcentre_m800_firmware, thinkcentre_m818z, thinkcentre_m818z_firmware, thinkcentre_m83, thinkcentre_m83_firmware, thinkcentre_m8500t\/s, thinkcentre_m8500t\/s_firmware, thinkcentre_m900, thinkcentre_m900_firmware, thinkcentre_m900x
CVE-2021-37190 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37191 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-799
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37192 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37193 (published 2021-09-14)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-471
Affected vendors: siemens
Affected products: sinema_remote_connect_server
CVE-2021-37194 (published 2022-02-09)
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS allows to upload and store arbitrary files at the webserver. This could allow an attacker to store malicious files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-434
Affected vendors: siemens
Affected products: comos
CVE-2021-37195 (published 2022-01-11)
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS accepts arbitrary code as attachment to tasks. This could allow an attacker to inject malicious code that is executed when loading the attachment.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-80
Affected vendors: siemens
Affected products: comos
CVE-2021-37196 (published 2022-01-11)
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.3 (All versions >= V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS unpacks specially crafted archive files to relative paths. This vulnerability could allow an attacker to store files in any folder accessible by the COMOS Web webservice.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-23
Affected vendors: siemens
Affected products: comos
CVE-2021-37197 (published 2022-01-11)
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is vulnerable to SQL injections. This could allow an attacker to execute arbitrary SQL statements.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: siemens
Affected products: comos
CVE-2021-37198 (published 2022-01-11)
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses a flawed implementation of CSRF prevention. An attacker could exploit this vulnerability to perform cross-site request forgery attacks.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: siemens
Affected products: comos
CVE-2021-37199 (published 2021-10-12)
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-122
Affected vendors: siemens
Affected products: sinumerik_808d, sinumerik_808d_firmware, sinumerik_828d, sinumerik_828d_firmware
CVE-2021-3720 (published 2021-11-12)
An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: lenovo
Affected products: legion_phone2_pro_\(l70081\), legion_phone2_pro_\(l70081\)_firmware, legion_phone_pro_\(l79031\), legion_phone_pro_\(l79031\)firmware
CVE-2021-37200 (published 2021-09-14)
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: siemens
Affected products: sinec_network_management_system
CVE-2021-37201 (published 2021-09-14)
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative privileges to click on a malicious link.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: siemens
Affected products: sinec_network_management_system
CVE-2021-37202 (published 2021-09-14)
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: siemens
Affected products: nx_1980, solid_edge
CVE-2021-37203 (published 2021-09-14)
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: siemens
Affected products: nx_1980, solid_edge
CVE-2021-37204 (published 2022-02-09)
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-672
Affected vendors: siemens
Affected products: simatic_drive_controller_cpu_1504d_tf, simatic_drive_controller_cpu_1504d_tf_firmware, simatic_drive_controller_cpu_1507d_tf, simatic_drive_controller_cpu_1507d_tf_firmware, simatic_et_200sp_open_controller_cpu_1515sp_pc2, simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware, simatic_s7-1200_cpu_1211c, simatic_s7-1200_cpu_1211c_firmware, simatic_s7-1200_cpu_1212c, simatic_s7-1200_cpu_1212c_firmware, simatic_s7-1200_cpu_1212fc, simatic_s7-1200_cpu_1212fc_firmware, simatic_s7-1200_cpu_1214c, simatic_s7-1200_cpu_1214c_firmware, simatic_s7-1200_cpu_1214fc, simatic_s7-1200_cpu_1214fc_firmware, simatic_s7-1200_cpu_1215c, simatic_s7-1200_cpu_1215c_firmware, simatic_s7-1200_cpu_1215fc, simatic_s7-1200_cpu_1215fc_firmware, simatic_s7-1200_cpu_1217c, simatic_s7-1200_cpu_1217c_firmware, simatic_s7-1500_cpu_1510sp, simatic_s7-1500_cpu_1510sp-1, simatic_s7-1500_cpu_1510sp-1_firmware
CVE-2021-37205 (published 2022-02-09)
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: siemens
Affected products: simatic_drive_controller_cpu_1504d_tf, simatic_drive_controller_cpu_1504d_tf_firmware, simatic_drive_controller_cpu_1507d_tf, simatic_drive_controller_cpu_1507d_tf_firmware, simatic_et_200sp_open_controller_cpu_1515sp_pc2, simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware, simatic_s7-1200_cpu_1211c, simatic_s7-1200_cpu_1211c_firmware, simatic_s7-1200_cpu_1212c, simatic_s7-1200_cpu_1212c_firmware, simatic_s7-1200_cpu_1212fc, simatic_s7-1200_cpu_1212fc_firmware, simatic_s7-1200_cpu_1214c, simatic_s7-1200_cpu_1214c_firmware, simatic_s7-1200_cpu_1214fc, simatic_s7-1200_cpu_1214fc_firmware, simatic_s7-1200_cpu_1215c, simatic_s7-1200_cpu_1215c_firmware, simatic_s7-1200_cpu_1215fc, simatic_s7-1200_cpu_1215fc_firmware, simatic_s7-1200_cpu_1217c, simatic_s7-1200_cpu_1217c_firmware, simatic_s7-1500_cpu_1510sp, simatic_s7-1500_cpu_1510sp-1, simatic_s7-1500_cpu_1510sp-1_firmware
CVE-2021-37206 (published 2021-09-14)
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: siemens
Affected products: siprotec_5_with_cpu_variant_cp050, siprotec_5_with_cpu_variant_cp100, siprotec_5_with_cpu_variant_cp300
CVE-2021-37207 (published 2021-11-09)
A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: siemens
Affected products: sentron_powermanager_3
CVE-2021-3721 (published 2022-04-22)
A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: lenovo
Affected products: pcmanager
CVE-2021-37211 (published 2021-08-09)
The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: larvata
Affected products: flygo
CVE-2021-37212 (published 2021-08-09)
The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the bulletin ID in specific Url parameters and access and modify bulletin particular content.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-706
Affected vendors: larvata
Affected products: flygo
CVE-2021-37213 (published 2021-08-09)
The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-706
Affected vendors: larvata
Affected products: flygo
CVE-2021-37214 (published 2021-08-09)
The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator privilege and execute arbitrary command.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-706
Affected vendors: larvata
Affected products: flygo
CVE-2021-37215 (published 2021-08-09)
The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attacker can manipulate the user data and then over-write another employee’s user data by specifying that employee’s ID in the API parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-706
Affected vendors: larvata
Affected products: flygo
CVE-2021-37216 (published 2021-08-02)
QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript without logging in and launch reflected XSS attacks to access and modify specific data.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qsan
Affected products: xn8008t, xn8008t_firmware, xn8024r, xn8024r_firmware
CVE-2021-37218 (published 2021-09-07)
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-295
Affected vendors: hashicorp
Affected products: nomad
CVE-2021-37219 (published 2021-09-07)
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-295
Affected vendors: hashicorp
Affected products: consul
CVE-2021-3722 (published 2022-04-22)
A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-276
Affected vendors: lenovo
Affected products: pcmanager
CVE-2021-37220 (published 2021-07-21)
MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: artifex, fedoraproject
Affected products: fedora, mupdf
CVE-2021-37221 (published 2021-10-27)
A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file. .
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: customer_relationship_management_system_project
Affected products: customer_relationship_management_system
CVE-2021-37222 (published 2021-08-12)
Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via specially crafted packets.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: rcdcap_project
Affected products: rcdcap
CVE-2021-37223 (published 2021-10-05)
Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-918
Affected vendors: nagios
Affected products: nagios_xi
CVE-2021-3723 (published 2021-11-12)
A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: ibm
Affected products: system_x3550_m3, system_x3550_m3_firmware, system_x3650_m3, system_x3650_m3_firmware
CVE-2021-37231 (published 2021-08-04)
A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: atomicparsley_project
Affected products: atomicparsley
CVE-2021-37232 (published 2021-08-04)
A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through APar_read64() in src/util.cpp due to the lack of buffer size of uint32_buffer while reading more bytes in APar_read64.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: atomicparsley_project
Affected products: atomicparsley
CVE-2021-37234 (published 2023-02-03)
Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-306
Affected vendors: modern_honey_network_project
Affected products: modern_honey_network
CVE-2021-3725 (published 2021-11-30)
Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered by pressing Alt-Left and Alt-Right, use functions that unsafely execute eval on directory names. If you cd into a directory with a carefully-crafted name, then press Alt-Left, the system is subject to command injection. Impacted areas: - Functions pop_past and pop_future in dirhistory plugin.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: planetargon
Affected products: oh_my_zsh
CVE-2021-37253 (published 2021-12-05)
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-444
Affected vendors: m-files
Affected products: m-files_web
CVE-2021-37254 (published 2021-10-28)
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key information on server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: m-files
Affected products: m-files_web