alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-27478 (published 2022-04-21)
Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: victor_cms_project
Affected products: victor_cms
CVE-2022-27479 (published 2022-04-13)
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: apache
Affected products: superset
CVE-2022-2748 (published 2022-08-11)
A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206016.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: simple_online_book_store_system_project
Affected products: simple_online_book_store_system
CVE-2022-27480 (published 2022-04-12)
A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-862
Affected vendors: siemens
Affected products: sicam_a8000_cp-8031, sicam_a8000_cp-8031_firmware, sicam_a8000_cp-8050, sicam_a8000_cp-8050_firmware
CVE-2022-27481 (published 2022-04-12)
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-362
Affected vendors: siemens
Affected products: scalance_w1788-1_m12, scalance_w1788-1_m12_firmware, scalance_w1788-2_eec_m12, scalance_w1788-2_eec_m12_firmware, scalance_w1788-2_m12, scalance_w1788-2_m12_firmware, scalance_w1788-2ia_m12, scalance_w1788-2ia_m12_firmware
CVE-2022-27482 (published 2023-02-16)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fortinet
Affected products: fortiadc
CVE-2022-27483 (published 2022-07-19)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 through 6.4.7, 6.2.x and 6.0.x allows attacker to execute arbitrary shell code as `root` user via `diagnose system` CLI commands.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fortinet
Affected products: fortianalyzer, fortimanager
CVE-2022-27484 (published 2022-08-03)
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-287
Affected vendors: fortinet
Affected products: fortiadc
CVE-2022-27485 (published 2023-04-11)
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox version 4.2.0, 4.0.0 through 4.0.2, 3.2.0 through 3.2.3, 3.1.x and 3.0.x allows a remote and authenticated attacker with read permission to retrieve arbitrary files from the underlying Linux system via a crafted HTTP request.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: fortinet
Affected products: fortisandbox
CVE-2022-27486 (published 2024-08-13)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 allows an authenticated attacker to execute shell code as `root` via `execute` CLI commands.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fortinet
Affected products: fortiddos, fortiddos-f
CVE-2022-27487 (published 2023-04-11)
A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor version 4.1.0, 4.0.0 through 4.0.2 and before 3.3.3 allows a remote authenticated attacker to perform unauthorized API calls via crafted HTTP or HTTPS requests.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: fortinet
Affected products: fortideceptor, fortisandbox
CVE-2022-27488 (published 2023-12-13)
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: fortinet
Affected products: fortiai, fortimail, fortindr, fortirecorder, fortiswitch, fortivoice
CVE-2022-27489 (published 2023-02-16)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.0.0 through 7.0.3, 5.3.2, 4.2.4 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fortinet
Affected products: fortiextender, fortiextender_firmware
CVE-2022-2749 (published 2022-08-11)
A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?view_exercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206017 was assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: gym_management_system_project
Affected products: gym_management_system
CVE-2022-27490 (published 2023-03-07)
A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.x, 6.0.x allows an attacker which has obtained access to a restricted administrative account to obtain sensitive information via `diagnose debug` commands.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: fortinet
Affected products: fortianalyzer, fortimanager, fortiportal, fortiswitch
CVE-2022-27491 (published 2022-09-06)
A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: fortinet
Affected products: fortios
CVE-2022-27492 (published 2022-09-23)
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-191
Affected vendors: whatsapp
Affected products: whatsapp
CVE-2022-27493 (published 2022-08-18)
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel
Affected products: lapbc510, lapbc510_firmware, lapbc710, lapbc710_firmware
CVE-2022-27494 (published 2022-10-21)
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: aethon
Affected products: tug_home_base_server
CVE-2022-27495 (published 2022-05-05)
On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: f5
Affected products: nginx_service_mesh
CVE-2022-27496 (published 2022-03-31)
Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zero-channel_plus_project
Affected products: zero-channel_plus
CVE-2022-27497 (published 2022-11-11)
Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2022-27498 (published 2022-12-15)
A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: lansweeper
Affected products: lansweeper
CVE-2022-27499 (published 2022-11-11)
Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-672
Affected vendors: intel
Affected products: sgx_sdk
CVE-2022-2750 (published 2022-08-11)
A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the file /dashboard/add-service.php of the component Add Service Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-206022 is the identifier assigned to this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: company_website_cms_project
Affected products: company_website_cms
CVE-2022-27500 (published 2022-08-18)
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: intel
Affected products: support
CVE-2022-27502 (published 2022-06-10)
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft, realvnc
Affected products: vnc_server, windows
CVE-2022-27503 (published 2022-04-13)
Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: citrix
Affected products: storefront_server
CVE-2022-27505 (published 2022-04-13)
Reflected cross site scripting (XSS)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: citrix
Affected products: sd-wan_1000, sd-wan_1000_firmware, sd-wan_110, sd-wan_1100, sd-wan_1100_firmware, sd-wan_110_firmware, sd-wan_2000, sd-wan_2000_firmware, sd-wan_210, sd-wan_2100, sd-wan_2100_firmware, sd-wan_210_firmware, sd-wan_400, sd-wan_4000, sd-wan_4000_firmware, sd-wan_400_firmware, sd-wan_410, sd-wan_4100, sd-wan_4100_firmware, sd-wan_410_firmware, sd-wan_5100, sd-wan_5100_firmware, sd-wan_6100, sd-wan_6100_firmware
CVE-2022-27506 (published 2022-04-13)
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-798
Affected vendors: citrix
Affected products: sd-wan_1000, sd-wan_1000_firmware, sd-wan_110, sd-wan_1100, sd-wan_1100_firmware, sd-wan_110_firmware, sd-wan_2000, sd-wan_2000_firmware, sd-wan_210, sd-wan_2100, sd-wan_2100_firmware, sd-wan_210_firmware, sd-wan_400, sd-wan_4000, sd-wan_4000_firmware, sd-wan_400_firmware, sd-wan_410, sd-wan_4100, sd-wan_4100_firmware, sd-wan_410_firmware, sd-wan_5100, sd-wan_5100_firmware, sd-wan_6100, sd-wan_6100_firmware, sd-wan_center_management_console
CVE-2022-27507 (published 2023-01-26)
Authenticated denial of service
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: citrix
Affected products: application_delivery_controller, gateway
CVE-2022-27508 (published 2023-01-26)
Unauthenticated denial of service
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: citrix
Affected products: application_delivery_controller, gateway
CVE-2022-27509 (published 2022-07-28)
Unauthenticated redirection to a malicious website
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: citrix
Affected products: application_delivery_controller, application_delivery_controller_firmware, gateway
CVE-2022-2751 (published 2022-08-11)
A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206024.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: company_website_cms_project
Affected products: company_website_cms
CVE-2022-27510 (published 2022-11-08)
Unauthorized access to Gateway user capabilities 

Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: citrix
Affected products: application_delivery_controller, application_delivery_controller_firmware, gateway
CVE-2022-27511 (published 2022-06-16)
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: citrix
Affected products: application_delivery_management
CVE-2022-27512 (published 2022-06-16)
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-664
Affected vendors: citrix
Affected products: application_delivery_management
CVE-2022-27513 (published 2022-11-08)
Remote desktop takeover via phishing  

Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-345
Affected vendors: citrix
Affected products: application_delivery_controller, application_delivery_controller_firmware, gateway
CVE-2022-27516 (published 2022-11-08)
User login brute force protection functionality bypass   

Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-693
Affected vendors: citrix
Affected products: application_delivery_controller, application_delivery_controller_firmware, gateway
CVE-2022-27518 (published 2022-12-13)
Unauthenticated remote arbitrary code execution
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-664
Affected vendors: citrix
Affected products: application_delivery_controller, application_delivery_controller_firmware, gateway, gateway_firmware
Added to CISA KEV catalog: 2022-12-13
KEV required action: Apply updates per vendor instructions.
CVE-2022-2752 (published 2022-12-09)
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.



Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: secomea
Affected products: gatemanager
CVE-2022-27523 (published 2022-04-13)
A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: autodesk
Affected products: dwg_trueview
CVE-2022-27524 (published 2022-04-13)
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: autodesk
Affected products: dwg_trueview
CVE-2022-27525 (published 2022-04-18)
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: design_review
CVE-2022-27526 (published 2022-04-18)
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: design_review
CVE-2022-27527 (published 2022-04-19)
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: navisworks
CVE-2022-27528 (published 2022-04-11)
A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: autodesk
Affected products: navisworks
CVE-2022-27529 (published 2022-04-18)
A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: advance_steel, autocad, autocad_architecture, autocad_electrical, autocad_lt, autocad_map_3d, autocad_mechanical, autocad_mep, autocad_plant_3d, civil_3d
CVE-2022-2753 (published 2022-09-19)
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: ketchup_restaurant_reservations_project
Affected products: ketchup_restaurant_reservations
CVE-2022-27530 (published 2022-04-18)
A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: advance_steel, autocad, autocad_architecture, autocad_electrical, autocad_lt, autocad_map_3d, autocad_mechanical, autocad_mep, autocad_plant_3d, civil_3d
CVE-2022-27531 (published 2022-06-16)
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: autodesk
Affected products: 3ds_max
CVE-2022-27532 (published 2022-06-16)
A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autodesk
Affected products: 3ds_max
CVE-2022-27534 (published 2022-04-01)
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: kaspersky
Affected products: anti-virus, endpoint_security, internet_security, security_cloud, small_office_security, total_security
CVE-2022-27535 (published 2022-08-05)
Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: kaspersky, microsoft
Affected products: vpn_secure_connection, windows
CVE-2022-27536 (published 2022-04-20)
Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-295
Affected vendors: apple, golang
Affected products: go, macos
CVE-2022-27537 (published 2023-02-01)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: hp
Affected products: dragonfly_folio_g3_2-in-1, dragonfly_folio_g3_2-in-1_firmware, elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_folio_2-in-1, elite_folio_2-in-1_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice, elite_slice_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9
CVE-2022-27538 (published 2023-02-01)
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_g3_2-in-1, dragonfly_folio_g3_2-in-1_firmware, elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice, elite_slice_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9, elite_tower_600_g9_firmware, elite_tower_680_g9
CVE-2022-27539 (published 2023-06-12)
Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-2754 (published 2022-09-19)
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ketchup_restaurant_reservations_project
Affected products: ketchup_restaurant_reservations
CVE-2022-27540 (published 2024-06-28)
A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_mt645_g7_mobile_thin_client, elite_mt645_g7_mobile_thin_client_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms_firmware, elite_slice_g2_with_intel_unite
CVE-2022-27541 (published 2023-06-12)
Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-27544 (published 2022-07-19)
BigFix Web Reports authorized users may see SMTP credentials in clear text.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: hcltech
Affected products: bigfix_platform
CVE-2022-27545 (published 2022-07-19)
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hcltech
Affected products: bigfix_platform
CVE-2022-27546 (published 2022-08-29)
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hcltech
Affected products: domino, hcl_inotes
CVE-2022-27547 (published 2022-08-29)
HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)
Weakness: CWE-601
Affected vendors: hcltech
Affected products: domino, hcl_inotes
CVE-2022-27548 (published 2022-07-06)
HCL Launch stores user credentials in plain clear text which can be read by a local user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-256
Affected vendors: hcltechsw
Affected products: hcl_launch
CVE-2022-27549 (published 2022-07-06)
HCL Launch may store certain data for recurring activities in a plain text format.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: hcltechsw
Affected products: hcl_launch
CVE-2022-27551 (published 2022-08-03)
HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-863
Affected vendors: hcltechsw
Affected products: hcl_launch
CVE-2022-27558 (published 2022-08-29)
HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-521
Affected vendors: hcltech
Affected products: domino, hcl_inotes
CVE-2022-2756 (published 2022-08-10)
Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-918
Affected vendors: kavitareader
Affected products: kavita
CVE-2022-27560 (published 2022-08-30)
HCL VersionVault Express exposes administrator credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: hcltech
Affected products: versionvault_express
CVE-2022-27561 (published 2022-09-15)
There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hcltech
Affected products: traveler
CVE-2022-27563 (published 2022-08-30)
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: hcltech
Affected products: versionvault_express
CVE-2022-27567 (published 2022-04-11)
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-476
Affected vendors: google
Affected products: android
CVE-2022-27568 (published 2022-04-11)
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: google
Affected products: android
CVE-2022-27569 (published 2022-04-11)
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: google
Affected products: android
CVE-2022-2757 (published 2022-12-13)



Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and modifying the application settings without authenticating by accessing a specific uniform resource locator (URL) on the webserver.


Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-287
Affected vendors: kingspan
Affected products: tms300_cs, tms300_cs_firmware
CVE-2022-27570 (published 2022-04-11)
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: google
Affected products: android
CVE-2022-27571 (published 2022-04-11)
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: google
Affected products: android
CVE-2022-27572 (published 2022-04-11)
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: google
Affected products: android
CVE-2022-27573 (published 2022-04-11)
Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2022-27574 (published 2022-04-11)
Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2022-27575 (published 2022-04-11)
Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: google
Affected products: android
CVE-2022-27576 (published 2022-04-11)
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: google
Affected products: android
CVE-2022-27577 (published 2022-04-11)
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise services on the MSC800. SICK has released a new firmware version of the SICK MSC800 and recommends updating to the newest version.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-342
Affected vendors: sick
Affected products: msc800, msc800_firmware
CVE-2022-27578 (published 2022-04-11)
An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where non authenticated or low privilege users can modify its content.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-250
Affected vendors: sick
Affected products: overall_equipment_effectiveness
CVE-2022-27579 (published 2022-07-19)
A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges of the current user when opened or imported by the Flexi Soft Designer. This compromises confidentiality integrity and availability. For the attack to succeed a user must manually open a malicious project file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: sick
Affected products: flexi_soft_designer
CVE-2022-2758 (published 2022-08-31)
Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-326
Affected vendors: ls-electric
Affected products: gm7, gm7_firmware, gm7u, gm7u_firmware, k120s, k120s_firmware, k80s, k80s_firmware, xbc-dn10e, xbc-dn10e_firmware, xbc-dn14e, xbc-dn14e_firmware, xbc-dn20e, xbc-dn20e_firmware, xbc-dn20su, xbc-dn20su_firmware, xbc-dn30e, xbc-dn30e_firmware, xbc-dn30su, xbc-dn30su_firmware, xbc-dn32h, xbc-dn32h\/dc, xbc-dn32h\/dc_firmware, xbc-dn32h_firmware, xbc-dn40su
CVE-2022-27580 (published 2022-07-19)
A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges of the current user when opened or imported by the Safety Designer. This compromises confidentiality integrity and availability. For the attack to succeed a user must manually open a malicious project file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: sick
Affected products: safety_designer
CVE-2022-27581 (published 2022-12-13)
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: sick
Affected products: rfu610-10600, rfu610-10600_firmware, rfu610-10601, rfu610-10601_firmware, rfu610-10603, rfu610-10603_firmware, rfu610-10604, rfu610-10604_firmware, rfu610-10605, rfu610-10605_firmware, rfu610-10607, rfu610-10607_firmware, rfu610-10609, rfu610-10609_firmware, rfu610-10610, rfu610-10610_firmware, rfu610-10613, rfu610-10613_firmware, rfu610-10614, rfu610-10614_firmware, rfu610-10618, rfu610-10618_firmware, rfu610-10700, rfu610-10700_firmware
CVE-2022-27582 (published 2022-11-01)
Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The firmware versions <=1.10.1 allow to optionally disable device configuration over the network interfaces. Please make sure that you apply general security practices when operating the SIM4000. A fix is planned but not yet scheduled.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: sick
Affected products: sim1000_fx, sim1000_fx_firmware, sim1004, sim1004_firmware, sim1012, sim1012_firmware, sim2000, sim2000_firmware, sim2000st, sim2000st_firmware, sim2500, sim2500_firmware, sim4000, sim4000_firmware
CVE-2022-27583 (published 2022-10-31)
A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-285
Affected vendors: sick
Affected products: flx3-cpuc1, flx3-cpuc1_firmware, flx3-cpuc2, flx3-cpuc2_firmware
CVE-2022-27584 (published 2022-11-01)
Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The firmware versions <=1.7.0 allow to optionally disable device configuration over the network interfaces. Please make sure that you apply general security practices when operating the SIM2000ST. A fix is planned but not yet scheduled.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: sick
Affected products: sim2000st, sim2000st_firmware
CVE-2022-27585 (published 2022-11-01)
Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.6.0 as soon as possible (available in SICK Support Portal).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: sick
Affected products: sim1000_fx, sim1000_fx_firmware
CVE-2022-27586 (published 2022-11-01)
Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 2.0.0 as soon as possible (available in SICK Support Portal).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: sick
Affected products: sim1004-0p0g311, sim1004-0p0g311_firmware