alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-22721 (published 2021-07-21)
A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to get limited knowledge of javascript code when crafted malicious parameters are submitted to the charging station web server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22722 (published 2021-07-21)
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause code injection when importing a CSV file or changing station parameters.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22723 (published 2021-07-21)
A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22724 (published 2022-01-28)
A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: schneider-electric
Affected products: evb1a, evb1a_firmware, evc1s22p4, evc1s22p4_firmware, evc1s7p4, evc1s7p4_firmware, evf2, evf2_firmware, evp2pe, evp2pe_firmware, evw2, evw2_firmware
CVE-2021-22725 (published 2022-01-28)
A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: schneider-electric
Affected products: evb1a, evb1a_firmware, evc1s22p4, evc1s22p4_firmware, evc1s7p4, evc1s7p4_firmware, evf2, evf2_firmware, evp2pe, evp2pe_firmware, evw2, evw2_firmware
CVE-2021-22726 (published 2021-07-21)
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform unintended actions or access to data when crafted malicious parameters are submitted to the charging station web server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22727 (published 2021-07-21)
A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized access to the charging station web server
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-331
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22728 (published 2021-07-21)
A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials when consulting the maintenance report.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22729 (published 2021-07-21)
A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized administrative privileges when accessing to the charging station web server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-259
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-2273 (published 2021-04-22)
Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite (component: Create Contracts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Legal Entity Configurator. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Legal Entity Configurator accessible data as well as unauthorized access to critical data or complete access to all Oracle Legal Entity Configurator accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: legal_entity_configurator
CVE-2021-22730 (published 2021-07-21)
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could an attacker to gain unauthorized administrative privileges when accessing to the charging station web server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22731 (published 2021-05-26)
Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-640
Affected vendors: schneider-electric
Affected products: mcsesm043f23f0, mcsesm043f23f0_firmware, mcsesm053f1cs0, mcsesm053f1cs0_firmware, mcsesm053f1cu0, mcsesm053f1cu0_firmware, mcsesm063f2cs0, mcsesm063f2cs0_firmware, mcsesm063f2cu0, mcsesm063f2cu0_firmware, mcsesm083f23f0, mcsesm083f23f0_firmware, mcsesm083f23f0h, mcsesm083f23f0h_firmware, mcsesm093f1cs0, mcsesm093f1cs0_firmware, mcsesm093f1cu0, mcsesm093f1cu0_firmware, mcsesm103f2cs0, mcsesm103f2cs0_firmware, mcsesm103f2cs0h, mcsesm103f2cs0h_firmware, mcsesm103f2cu0, mcsesm103f2cu0_firmware, mcsesm103f2cu0h
CVE-2021-22732 (published 2021-05-26)
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22733 (published 2021-05-26)
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22734 (published 2021-05-26)
Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22735 (published 2021-05-26)
Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22736 (published 2021-05-26)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22737 (published 2021-05-26)
Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-307
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22738 (published 2021-05-26)
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-327
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22739 (published 2021-05-26)
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-2274 (published 2021-04-22)
Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Tax. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle E-Business Tax accessible data as well as unauthorized access to critical data or complete access to all Oracle E-Business Tax accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: e-business_tax
CVE-2021-22740 (published 2021-05-26)
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: homelynk, homelynk_firmware, spacelynk, spacelynk_firmware
CVE-2021-22741 (published 2021-05-26)
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could cause the revealing of account credentials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to password decryption attacks. Note that “.sde” configuration export files do not contain user account password hashes.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-916
Affected vendors: schneider-electric
Affected products: clearscada, ecostruxure_geo_scada_expert_2019, ecostruxure_geo_scada_expert_2020
CVE-2021-22742 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22743 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22744 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22745, CVE-2021-22746, and CVE-2021-22747.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22745 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22746, and CVE-2021-22747.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22746 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22747.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22747 (published 2021-05-26)
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22746.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: schneider-electric
Affected products: tcm_4351b, tcm_4351b_firmware, triconex_model_3009_mp, triconex_model_3009_mp_firmware
CVE-2021-22748 (published 2022-02-11)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-22749 (published 2021-06-11)
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: modicon_x80_bmxnor0200h_rtu, modicon_x80_bmxnor0200h_rtu_firmware
CVE-2021-2275 (published 2021-04-22)
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: applications_manager
CVE-2021-22750 (published 2021-06-11)
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22751 (published 2021-06-11)
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22752 (published 2021-06-11)
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP (Workspace) file is being parsed by IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22753 (published 2021-06-11)
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22754 (published 2021-06-11)
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22755 (published 2021-06-11)
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22756 (published 2021-06-11)
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22757 (published 2021-06-11)
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22758 (published 2021-06-11)
A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22759 (published 2021-06-11)
A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-2276 (published 2021-04-22)
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSetup accessible data as well as unauthorized access to critical data or complete access to all Oracle iSetup accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: isetup
CVE-2021-22760 (published 2021-06-11)
A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-763
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22761 (published 2021-06-11)
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code e+F15xecution due to missing length check on user supplied data, when a malicious CGF file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22762 (published 2021-06-11)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in remote code execution, when a malicious CGF or WSP file is being parsed by IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22763 (published 2021-06-11)
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-640
Affected vendors: schneider-electric
Affected products: powerlogic_pm5560, powerlogic_pm5560_firmware, powerlogic_pm5561, powerlogic_pm5561_firmware, powerlogic_pm5562, powerlogic_pm5562_firmware, powerlogic_pm5563, powerlogic_pm5563_firmware, powerlogic_pm8ecc, powerlogic_pm8ecc_firmware
CVE-2021-22764 (published 2021-06-11)
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-287
Affected vendors: schneider-electric
Affected products: powerlogic_pm5560, powerlogic_pm5560_firmware, powerlogic_pm5561, powerlogic_pm5561_firmware, powerlogic_pm5562, powerlogic_pm5562_firmware, powerlogic_pm5563, powerlogic_pm5563_firmware
CVE-2021-22765 (published 2021-06-11)
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: powerlogic_egx100, powerlogic_egx100_firmware, powerlogic_egx300, powerlogic_egx300_firmware
CVE-2021-22766 (published 2021-06-11)
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: powerlogic_egx100, powerlogic_egx100_firmware, powerlogic_egx300, powerlogic_egx300_firmware
CVE-2021-22767 (published 2021-06-11)
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: powerlogic_egx100, powerlogic_egx100_firmware, powerlogic_egx300, powerlogic_egx300_firmware
CVE-2021-22768 (published 2021-06-11)
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: powerlogic_egx100, powerlogic_egx100_firmware, powerlogic_egx300, powerlogic_egx300_firmware
CVE-2021-22769 (published 2021-06-11)
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-552
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2021-2277 (published 2021-04-22)
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: oracle
Affected products: coherence
CVE-2021-22770 (published 2021-07-21)
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2021-22771 (published 2021-07-21)
A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-1236
Affected vendors: schneider-electric
Affected products: easergy_t300, easergy_t300_firmware
CVE-2021-22772 (published 2021-07-21)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), Easergy T200 ((IEC104) SC2-04IEC-07000100 and earlier), and Easergy T200 ((DNP3) SC2-04DNP-07000102 and earlier) that could cause unauthorized operation when authentication is bypassed.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: schneider-electric
Affected products: t200e, t200e_firmware, t200i, t200i_firmware, t200p, t200p_firmware
CVE-2021-22773 (published 2021-07-21)
A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker connected to the charging station web server to modify the password of a user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-620
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22774 (published 2021-07-21)
A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could lead an attacker to get knowledge of charging station user account credentials using dictionary attacks techniques.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-916
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22775 (published 2021-09-02)
A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: schneider-electric
Affected products: gp-pro_ex
CVE-2021-22777 (published 2021-07-21)
A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: schneider-electric
Affected products: sosafe_configurable
CVE-2021-22778 (published 2021-07-14)
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-522
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, ecostruxure_process_expert, remoteconnect
CVE-2021-22779 (published 2021-07-14)
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-290
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, ecostruxure_process_expert, modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342010, modicon_m340_bmxp342010_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp342030, modicon_m340_bmxp342030_firmware, modicon_m580_bmeh582040, modicon_m580_bmeh582040_firmware, modicon_m580_bmeh582040c, modicon_m580_bmeh582040c_firmware, modicon_m580_bmeh582040s, modicon_m580_bmeh582040s_firmware, modicon_m580_bmeh584040, modicon_m580_bmeh584040_firmware, modicon_m580_bmeh584040c, modicon_m580_bmeh584040c_firmware, modicon_m580_bmeh584040s, modicon_m580_bmeh584040s_firmware, modicon_m580_bmeh586040, modicon_m580_bmeh586040_firmware, modicon_m580_bmeh586040c
CVE-2021-2278 (published 2021-04-22)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: netapp, oracle
Affected products: active_iq_unified_manager, mysql, oncommand_insight, oncommand_workflow_automation, snapcenter
CVE-2021-22780 (published 2021-07-14)
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause unauthorized access to a project file protected by a password when this file is shared with untrusted sources. An attacker may bypass the password protection and be able to view and modify a project file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-522
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, ecostruxure_process_expert, remoteconnect
CVE-2021-22781 (published 2021-07-14)
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause a leak of SMTP credential used for mailbox authentication when an attacker can access a project file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, ecostruxure_process_expert, remoteconnect
CVE-2021-22782 (published 2021-07-14)
Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause an information leak allowing disclosure of network and process information, credentials or intellectual property when an attacker can access a project file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-311
Affected vendors: schneider-electric
Affected products: ecostruxure_control_expert, ecostruxure_process_expert, remoteconnect
CVE-2021-22783 (published 2022-03-09)
A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: ritto_wiser_door
CVE-2021-22784 (published 2021-07-21)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-22785 (published 2022-02-11)
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: 140cpu65150, 140cpu65150_firmware, 140noc77101, 140noc77101_firmware, 140noc78x00, 140noc78x00_firmware, 140noe771x1, 140noe771x1_firmware, bmxnoc0401, bmxnoc0401_firmware, bmxnoe0100, bmxnoe0100_firmware, bmxnoe0110, bmxnoe0110_firmware, bmxnor0200h_rtu, bmxnor0200h_rtu_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, tsxety4103, tsxety4103_firmware, tsxety5103, tsxety5103_firmware, tsxp574634, tsxp574634_firmware, tsxp575634
CVE-2021-22786 (published 2023-02-01)
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) (Versions prior to V3.30), Modicon M580 CPU (part numbers BMEP* and BMEH*) (Versions prior to SV3.20), Modicon MC80 (BMKC80) (Versions prior to V1.6), Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) (All Versions), Modicon Momentum MDI (171CBU*) (Versions prior to V2.3), Legacy Modicon Quantum (All Versions)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: schneider-electric
Affected products: modicon_m340_bmxp341000, modicon_m340_bmxp341000_firmware, modicon_m340_bmxp342000, modicon_m340_bmxp342000_firmware, modicon_m340_bmxp342010, modicon_m340_bmxp3420102, modicon_m340_bmxp3420102_firmware, modicon_m340_bmxp342010_firmware, modicon_m340_bmxp342020, modicon_m340_bmxp342020_firmware, modicon_m340_bmxp342020h, modicon_m340_bmxp342020h_firmware, modicon_m340_bmxp342030, modicon_m340_bmxp3420302, modicon_m340_bmxp3420302_firmware, modicon_m340_bmxp3420302h, modicon_m340_bmxp3420302h_firmware, modicon_m340_bmxp342030_firmware, modicon_m340_bmxp342030h, modicon_m340_bmxp342030h_firmware, modicon_m580_bmeh582040, modicon_m580_bmeh582040_firmware, modicon_m580_bmeh582040c, modicon_m580_bmeh582040c_firmware, modicon_m580_bmeh582040s