alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-2264 (published 2021-04-22)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: vm_virtualbox
CVE-2021-22640 (published 2022-07-28)
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-294
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22641 (published 2021-01-27)
A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: fujielectric
Affected products: v-server, v-simulator
CVE-2021-22642 (published 2022-07-28)
An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22643 (published 2021-02-23)
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: luxion, siemens
Affected products: keyshot, keyshot_network_rendering, keyshot_viewer, keyvr, solid_edge_se2020, solid_edge_se2020_firmware, solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-22644 (published 2022-07-28)
Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22645 (published 2021-02-23)
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-357
Affected vendors: luxion, siemens
Affected products: keyshot, keyshot_network_rendering, keyshot_viewer, keyvr, solid_edge_se2020, solid_edge_se2020_firmware, solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-22646 (published 2022-07-28)
The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22647 (published 2021-02-23)
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: luxion, siemens
Affected products: keyshot, keyshot_network_rendering, keyshot_viewer, keyvr, solid_edge_se2020, solid_edge_se2020_firmware, solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-22648 (published 2022-07-28)
Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22649 (published 2021-02-23)
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-822
Affected vendors: luxion, siemens
Affected products: keyshot, keyshot_network_rendering, keyshot_viewer, keyvr, solid_edge_se2020, solid_edge_se2020_firmware, solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-22650 (published 2022-07-28)
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: ovarro
Affected products: tbox_lt2-530, tbox_lt2-530_firmware, tbox_lt2-532, tbox_lt2-532_firmware, tbox_lt2-540, tbox_lt2-540_firmware, tbox_ms-cpu32, tbox_ms-cpu32-s2, tbox_ms-cpu32-s2_firmware, tbox_ms-cpu32_firmware, tbox_rm2, tbox_rm2_firmware, tbox_tg2, tbox_tg2_firmware, twinsoft
CVE-2021-22651 (published 2021-02-23)
When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: luxion, siemens
Affected products: keyshot, keyshot_network_rendering, keyshot_viewer, keyvr, solid_edge_se2020, solid_edge_se2020_firmware, solid_edge_se2021, solid_edge_se2021_firmware
CVE-2021-22652 (published 2021-02-11)
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: advantech
Affected products: iview
CVE-2021-22653 (published 2021-01-27)
Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fujielectric
Affected products: v-server, v-simulator
CVE-2021-22654 (published 2021-02-11)
Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: advantech
Affected products: iview
CVE-2021-22655 (published 2021-01-27)
Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: fujielectric
Affected products: v-server, v-simulator
CVE-2021-22656 (published 2021-02-11)
Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: advantech
Affected products: iview
CVE-2021-22657 (published 2021-12-23)
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: myscada
Affected products: mypro
CVE-2021-22658 (published 2021-02-11)
Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: advantech
Affected products: iview
CVE-2021-22659 (published 2021-03-25)
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Weakness: CWE-120
Affected vendors: rockwellautomation
Affected products: micrologix_1400, micrologix_1400_firmware
CVE-2021-2266 (published 2021-04-22)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: oracle
Affected products: vm_virtualbox
CVE-2021-22660 (published 2021-04-27)
CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: criticalmanufacturing
Affected products: cncsoft-b
CVE-2021-22661 (published 2021-02-26)
Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-264
Affected vendors: prosoft-technology
Affected products: icx35-hwc-a, icx35-hwc-a_firmware, icx35-hwc-e, icx35-hwc-e_firmware
CVE-2021-22662 (published 2021-03-03)
A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-22663 (published 2021-02-09)
Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: hornerautomation, siemens
Affected products: cscape
CVE-2021-22664 (published 2021-04-27)
CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: criticalmanufacturing
Affected products: cncsoft-b
CVE-2021-22665 (published 2021-03-18)
Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: rockwellautomation
Affected products: drivetools_add-on_profiles, drivetools_sp
CVE-2021-22666 (published 2021-03-03)
Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-22667 (published 2021-02-24)
BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: advantech
Affected products: bb-eswgp506-2sfp-t, bb-eswgp506-2sfp-t_firmware
CVE-2021-22668 (published 2021-05-16)
Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: deltaww
Affected products: cncsoft_screeneditor
CVE-2021-22669 (published 2021-04-26)
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-2267 (published 2021-04-22)
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Labor Distribution accessible data as well as unauthorized access to critical data or complete access to all Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: labor_distribution
CVE-2021-22670 (published 2021-03-03)
An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-22671 (published 2021-05-07)
Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: ti
Affected products: cc3100_software_development_kit, cc3200_software_development_kit, simplelink_cc13x0_software_development_kit, simplelink_cc13x2_software_development_kit, simplelink_cc26xx_software_development_kit, simplelink_cc32xx_software_development_kit, simplelink_msp432e4_software_development_kit
CVE-2021-22672 (published 2021-05-10)
Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: deltaww
Affected products: cncsoft_screeneditor
CVE-2021-22673 (published 2021-05-07)
The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: ti
Affected products: cc3100_software_development_kit, cc3200_software_development_kit, simplelink_cc13x0_software_development_kit, simplelink_cc13x2_software_development_kit, simplelink_cc26xx_software_development_kit, simplelink_cc32xx_software_development_kit, simplelink_msp432e4_software_development_kit
CVE-2021-22674 (published 2021-08-10)
The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-23
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-22675 (published 2021-05-07)
The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: ti
Affected products: cc3100_software_development_kit, cc3200_software_development_kit, simplelink_cc13x0_software_development_kit, simplelink_cc13x2_software_development_kit, simplelink_cc26xx_software_development_kit, simplelink_cc32xx_software_development_kit, simplelink_msp432e4_software_development_kit
CVE-2021-22676 (published 2021-08-10)
UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: advantech
Affected products: webaccess\/scada
CVE-2021-22677 (published 2021-05-07)
An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: ti
Affected products: cc3100_software_development_kit, cc3200_software_development_kit, simplelink_cc13x0_software_development_kit, simplelink_cc13x2_software_development_kit, simplelink_cc26xx_software_development_kit, simplelink_cc32xx_software_development_kit, simplelink_msp432e4_software_development_kit
CVE-2021-22678 (published 2021-04-23)
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: hornerautomation
Affected products: cscape
CVE-2021-22679 (published 2021-05-07)
The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: ti
Affected products: cc3100_software_development_kit, cc3200_software_development_kit, simplelink_cc13x0_software_development_kit, simplelink_cc13x2_software_development_kit, simplelink_cc26xx_software_development_kit, simplelink_cc32xx_software_development_kit, simplelink_msp432e4_software_development_kit
CVE-2021-2268 (published 2021-04-22)
Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Quoting accessible data as well as unauthorized access to critical data or complete access to all Oracle Quoting accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: quoting
CVE-2021-22680 (published 2022-05-03)
NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: nxp
Affected products: mqx
CVE-2021-22681 (published 2021-03-03)
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: rockwellautomation
Affected products: compact_guardlogix_5370, compact_guardlogix_5380, compactlogix_1768, compactlogix_1769, compactlogix_5370, compactlogix_5380, compactlogix_5480, controllogix_5550, controllogix_5560, controllogix_5570, controllogix_5580, drivelogix_1794-l34, drivelogix_5560, drivelogix_5730, factorytalk_services_platform, guardlogix_5570, guardlogix_5580, rslogix_5000, softlogix_5800, studio_5000_logix_designer
Added to CISA KEV catalog: 2026-03-05
KEV required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2021-22682 (published 2021-04-23)
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: hornerautomation
Affected products: cscape
CVE-2021-22683 (published 2021-03-03)
Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fatek
Affected products: fvdesigner
CVE-2021-22684 (published 2021-08-31)
Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-190
Affected vendors: samsung
Affected products: tizenrt
CVE-2021-22685 (published 2022-10-14)
An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: cassianetworks
Affected products: access_controller
CVE-2021-2269 (published 2021-04-22)
Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price Book). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Pricing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Pricing accessible data as well as unauthorized access to critical data or complete access to all Oracle Advanced Pricing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: advanced_pricing
CVE-2021-22696 (published 2021-04-02)
CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the "request_uri" parameter. CXF was not validating the "request_uri" parameter (apart from ensuring it uses "https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: apache, oracle
Affected products: business_intelligence, communications_diameter_intelligence_hub, communications_element_manager, communications_session_report_manager, communications_session_route_manager, cxf
CVE-2021-22697 (published 2021-01-26)
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: schneider-electric
Affected products: ecostruxure_power_build_-_rapsody
CVE-2021-22698 (published 2021-01-26)
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: schneider-electric
Affected products: ecostruxure_power_build_-_rapsody
CVE-2021-22699 (published 2021-05-26)
Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: schneider-electric
Affected products: modicon_m241, modicon_m241_firmware, modicon_m251, modicon_m251_firmware
CVE-2021-2270 (published 2021-04-22)
Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Sites). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Site Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Site Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: site_hub
CVE-2021-22701 (published 2021-02-19)
A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: schneider-electric
Affected products: powerlogic_ion7400, powerlogic_ion7400_firmware, powerlogic_ion7410, powerlogic_ion7650, powerlogic_ion7650_firmware, powerlogic_ion8300, powerlogic_ion8300_firmware, powerlogic_ion8400, powerlogic_ion8400_firmware, powerlogic_ion8500, powerlogic_ion8500_firmware, powerlogic_ion8600, powerlogic_ion8600_firmware, powerlogic_ion8650, powerlogic_ion8650_firmware, powerlogic_ion8800, powerlogic_ion8800_firmware, powerlogic_ion9000, powerlogic_ion9000_firmware, powerlogic_pm8000, powerlogic_pm8000_firmware
CVE-2021-22702 (published 2021-02-19)
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: schneider-electric
Affected products: powerlogic_ion7300, powerlogic_ion7300_firmware, powerlogic_ion7400, powerlogic_ion7400_firmware, powerlogic_ion7650, powerlogic_ion7650_firmware, powerlogic_ion7700, powerlogic_ion7700_firmware, powerlogic_ion8300, powerlogic_ion8300_firmware, powerlogic_ion8400, powerlogic_ion8400_firmware, powerlogic_ion8500, powerlogic_ion8500_firmware, powerlogic_ion8600, powerlogic_ion8600_firmware, powerlogic_ion8650, powerlogic_ion8650_firmware, powerlogic_ion8800, powerlogic_ion8800_firmware, powerlogic_ion9000, powerlogic_ion9000_firmware, powerlogic_pm8000, powerlogic_pm8000_firmware
CVE-2021-22703 (published 2021-02-19)
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: schneider-electric
Affected products: powerlogic_ion7400, powerlogic_ion7400_firmware, powerlogic_ion7650, powerlogic_ion7650_firmware, powerlogic_ion8300, powerlogic_ion8300_firmware, powerlogic_ion8400, powerlogic_ion8400_firmware, powerlogic_ion8500, powerlogic_ion8500_firmware, powerlogic_ion8600, powerlogic_ion8600_firmware, powerlogic_ion8650, powerlogic_ion8650_firmware, powerlogic_ion8800, powerlogic_ion8800_firmware, powerlogic_ion9000, powerlogic_ion9000_firmware, powerlogic_pm8000, powerlogic_pm8000_firmware
CVE-2021-22704 (published 2021-09-02)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: ecostruxure_machine_expert, harmony_gk, harmony_gto, harmony_gtu, harmony_gtux, harmony_gxu, harmony_scu, harmony_sto, harmony_stu, vijeo_designer
CVE-2021-22705 (published 2021-05-26)
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: ecostruxure_machine_expert, harmony_gk, harmony_gto, harmony_gtu, harmony_gtux, harmony_hmiscu, harmony_sto, harmony_stu, vijeo_designer
CVE-2021-22706 (published 2021-07-21)
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22707 (published 2021-07-21)
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22708 (published 2021-07-21)
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to craft a malicious firmware package and bypass the signature verification mechanism.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: schneider-electric
Affected products: evlink_city_evc1s22p4, evlink_city_evc1s22p4_firmware, evlink_city_evc1s7p4, evlink_city_evc1s7p4_firmware, evlink_parking_ev.2, evlink_parking_ev.2_firmware, evlink_parking_evf2, evlink_parking_evf2_firmware, evlink_parking_evw2, evlink_parking_evw2_firmware, evlink_smart_wallbox_evb1a, evlink_smart_wallbox_evb1a_firmware
CVE-2021-22709 (published 2021-03-11)
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in loss of data or remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-2271 (published 2021-04-22)
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Resource Exceptions). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Work in Process accessible data as well as unauthorized access to critical data or complete access to all Oracle Work in Process accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: work_in_progress
CVE-2021-22710 (published 2021-03-11)
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22711 (published 2021-03-11)
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to missing validation of input data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22712 (published 2021-03-11)
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: interactive_graphical_scada_system
CVE-2021-22713 (published 2021-03-11)
A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: ion7650_firmware, powerlogic_ion7300, powerlogic_ion7300_firmware, powerlogic_ion7550, powerlogic_ion7550_firmware, powerlogic_ion7650, powerlogic_ion7650_firmware, powerlogic_ion7700, powerlogic_ion7700_firmware, powerlogic_ion8300, powerlogic_ion8300_firmware, powerlogic_ion8400, powerlogic_ion8400_firmware, powerlogic_ion8500, powerlogic_ion8500_firmware, powerlogic_ion8600, powerlogic_ion8600_firmware, powerlogic_ion8650, powerlogic_ion8650_firmware, powerlogic_ion8800, powerlogic_ion8800_firmware
CVE-2021-22714 (published 2021-03-11)
A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: schneider-electric
Affected products: powerlogic_ion7400, powerlogic_ion7400_firmware, powerlogic_ion9000, powerlogic_ion9000_firmware, powerlogic_pm8000, powerlogic_pm8000_firmware
CVE-2021-22716 (published 2021-04-13)
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-22717 (published 2021-04-13)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-22718 (published 2021-04-13)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-22719 (published 2021-04-13)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: c-bus_toolkit
CVE-2021-2272 (published 2021-04-22)
Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inquiries). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Subledger Accounting accessible data as well as unauthorized access to critical data or complete access to all Oracle Subledger Accounting accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: oracle
Affected products: subledger_accounting
CVE-2021-22720 (published 2021-04-13)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: schneider-electric
Affected products: c-bus_toolkit