alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-34494 (published 2021-07-14)
Windows DNS Server Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34496 (published 2021-07-14)
Windows GDI Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34497 (published 2021-07-14)
Windows MSHTML Platform Remote Code Execution Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34498 (published 2021-07-14)
Windows GDI Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34499 (published 2021-07-14)
Windows DNS Server Denial of Service Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-3450 (published 2021-03-25)
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-295
Affected vendors: fedoraproject, freebsd, mcafee, netapp, nodejs, openssl, oracle, sonicwall, tenable, windriver
Affected products: capture_client, cloud_volumes_ontap_mediator, commerce_guided_search, email_security, enterprise_manager_for_storage_management, fedora, freebsd, graalvm, jd_edwards_enterpriseone_tools, jd_edwards_world_security, linux, mysql_connectors, mysql_enterprise_monitor, mysql_server, mysql_workbench, nessus, nessus_agent, nessus_network_monitor, node.js, oncommand_workflow_automation, ontap_select_deploy_administration_utility, openssl, peoplesoft_enterprise_peopletools, santricity_smi-s_provider, santricity_smi-s_provider_firmware
CVE-2021-34500 (published 2021-07-14)
Windows Kernel Memory Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34501 (published 2021-07-14)
Microsoft Excel Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: 365_apps, excel, office, office_online_server
CVE-2021-34503 (published 2021-07-14)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2019
CVE-2021-34504 (published 2021-07-14)
Windows Address Book Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34506 (published 2023-07-01)
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Affected vendors: microsoft
Affected products: edge_chromium
CVE-2021-34507 (published 2021-07-14)
Windows Remote Assistance Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34508 (published 2021-07-14)
Windows Kernel Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34509 (published 2021-07-14)
Storage Spaces Controller Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-3451 (published 2021-04-27)
A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-276
Affected vendors: lenovo
Affected products: pcmanager
CVE-2021-34510 (published 2021-07-14)
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34511 (published 2021-07-14)
Windows Installer Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34512 (published 2021-07-14)
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34513 (published 2021-07-14)
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016
CVE-2021-34514 (published 2021-07-14)
Windows Kernel Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34516 (published 2021-07-14)
Win32k Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34517 (published 2021-07-14)
Microsoft SharePoint Server Spoofing Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: microsoft
Affected products: sharepoint_foundation, sharepoint_server
CVE-2021-34518 (published 2021-07-14)
Microsoft Excel Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: excel, office_web_apps_server
CVE-2021-34519 (published 2021-07-14)
Microsoft SharePoint Server Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: sharepoint_foundation, sharepoint_server
CVE-2021-3452 (published 2021-07-16)
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: lenovo
Affected products: bios, thinkpad_11e_3rd_gen, thinkpad_11e_4th_gen, thinkpad_11e_5th_gen, thinkpad_11e_yoga_gen_6, thinkpad_13_gen_2, thinkpad_e14_gen_2, thinkpad_e15_gen_2, thinkpad_l13, thinkpad_l13_gen_2, thinkpad_l13_yoga, thinkpad_l13_yogo_gen_2, thinkpad_l14, thinkpad_l14_gen_2, thinkpad_l15, thinkpad_l15_gen_2, thinkpad_l380, thinkpad_l380_yoga, thinkpad_l390, thinkpad_l390_yoga, thinkpad_t460, thinkpad_x12_detachable_gen_1, thinkpad_x260, thinkpad_x380_yoga, thinkpad_yoga_11e_3rd_gen
CVE-2021-34520 (published 2021-07-14)
Microsoft SharePoint Server Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-502
Affected vendors: microsoft
Affected products: sharepoint_foundation, sharepoint_server
CVE-2021-34521 (published 2021-07-14)
Raw Image Extension Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016
CVE-2021-34522 (published 2021-07-14)
Microsoft Defender Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: malware_protection_engine
CVE-2021-34523 (published 2021-07-14)
Microsoft Exchange Server Elevation of Privilege Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)
Affected vendors: microsoft
Affected products: exchange_server
Added to CISA KEV catalog: 2021-11-03
KEV required action: Apply updates per vendor instructions.
CVE-2021-34524 (published 2021-08-12)
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: microsoft
Affected products: dynamics_365
CVE-2021-34525 (published 2021-07-14)
Windows DNS Server Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34527 (published 2021-07-02)
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.
In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (Note: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint
NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)
UpdatePromptSettings = 0 (DWORD) or not defined (default setting)

Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.
UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates.
Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_20h2, windows_10_21h2, windows_10_22h2, windows_11_21h2, windows_11_22h2, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_20h2
Added to CISA KEV catalog: 2021-11-03
KEV required action: Apply updates per vendor instructions.
CVE-2021-34528 (published 2021-07-14)
Visual Studio Code Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: visual_studio_code
CVE-2021-34529 (published 2021-07-14)
Visual Studio Code Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: visual_studio_code
CVE-2021-3453 (published 2021-07-16)
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-693
Affected vendors: lenovo
Affected products: 730s-13iml, 730s-13iml_firmware, ideacentre_aio_5-24imb05, ideacentre_aio_5-24imb05_firmware, ideacentre_aio_5-74imb05, ideacentre_aio_5-74imb05_firmware, ideapad_1-11igl05, ideapad_1-11igl05_firmware, ideapad_1-14igl05, ideapad_1-14igl05_firmware, ideapad_s940-14iil, ideapad_s940-14iil_firmware, ideapad_s940-14iwl, ideapad_s940-14iwl_firmware, ideapad_slim_1-11ast-05, ideapad_slim_1-11ast-05_firmware, ideapad_slim_1-14ast-05, ideapad_slim_1-14ast-05_firmware, thinkpad_helix, thinkpad_helix_firmware, thinkpad_t550, thinkpad_t550_firmware, thinkpad_w550s, thinkpad_w550s_firmware, thinkpad_x1_carbon_3rd_gen
CVE-2021-34530 (published 2021-08-12)
Windows Graphics Component Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34532 (published 2021-08-12)
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: asp.net_core, visual_studio_2019
CVE-2021-34533 (published 2021-08-12)
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34534 (published 2021-08-12)
Windows MSHTML Platform Remote Code Execution Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34535 (published 2021-08-12)
Remote Desktop Client Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: remote_desktop_client, windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34536 (published 2021-08-12)
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-34537 (published 2021-08-12)
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-34538 (published 2022-07-16)
Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: apache
Affected products: hive
CVE-2021-34539 (published 2021-06-10)
An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged users can trigger code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-668
Affected vendors: cubecoders
Affected products: amp
CVE-2021-3454 (published 2021-10-19)
Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-130
Affected vendors: zephyrproject
Affected products: zephyr
CVE-2021-34540 (published 2021-06-11)
Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: advantech
Affected products: webaccess
CVE-2021-34543 (published 2021-12-07)
The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: bkw
Affected products: solar-log_500, solar-log_500_firmware
CVE-2021-34544 (published 2021-12-07)
An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: bkw
Affected products: solar-log_500, solar-log_500_firmware
CVE-2021-34546 (published 2021-06-10)
An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to file" feature. To accomplish this, the attacker can navigate to cmd.exe.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: netsetman
Affected products: netsetman
CVE-2021-34547 (published 2021-06-10)
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-352
Affected vendors: paessler
Affected products: prtg_network_monitor
CVE-2021-34548 (published 2021-06-29)
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-290
Affected vendors: torproject
Affected products: tor
CVE-2021-34549 (published 2021-06-29)
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: torproject
Affected products: tor
CVE-2021-3455 (published 2021-10-19)
Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-416
Affected vendors: zephyrproject
Affected products: zephyr
CVE-2021-34550 (published 2021-06-29)
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: torproject
Affected products: tor
CVE-2021-34551 (published 2021-06-16)
PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: fedoraproject, microsoft, phpmailer_project
Affected products: fedora, phpmailer, windows
CVE-2021-34552 (published 2021-07-13)
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: debian, fedoraproject, python
Affected products: debian_linux, fedora, pillow
CVE-2021-34553 (published 2021-06-18)
Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-22
Affected vendors: sonatype
Affected products: nexus_repository_manager
CVE-2021-34555 (published 2021-06-10)
OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: fedoraproject, trusteddomain
Affected products: fedora, opendmarc
CVE-2021-34556 (published 2021-08-02)
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: debian, fedoraproject, linux
Affected products: debian_linux, fedora, linux_kernel
CVE-2021-34557 (published 2021-06-10)
XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: fedoraproject, xscreensaver_project
Affected products: fedora, xscreensaver
CVE-2021-34558 (published 2021-07-15)
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-295
Affected vendors: fedoraproject, golang, netapp, oracle
Affected products: cloud_insights_telegraf, fedora, go, storagegrid, timesten_in-memory_database, trident
CVE-2021-34559 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-444
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-3456 (published 2022-03-30)
An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-863
Affected vendors: theforeman
Affected products: smart_proxy_salt
CVE-2021-34560 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34561 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-350
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34562 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34563 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-1004
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34564 (published 2021-08-31)
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-315
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-_z2-eth.eip, wha-gw-f2d2-0-as-_z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34565 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth.eip, wha-gw-f2d2-0-as-z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-34566 (published 2022-11-09)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-120
Affected vendors: wago
Affected products: 750-8100, 750-8100_firmware, 750-8101, 750-8101\/025-000, 750-8101\/025-000_firmware, 750-8101_firmware, 750-8102, 750-8102\/025-000, 750-8102\/025-000_firmware, 750-8102_firmware, 750-8202, 750-8202\/000-011, 750-8202\/000-011_firmware, 750-8202\/000-012, 750-8202\/000-012_firmware, 750-8202\/000-022, 750-8202\/000-022_firmware, 750-8202\/025-000, 750-8202\/025-000_firmware, 750-8202\/025-001, 750-8202\/025-001_firmware, 750-8202\/025-002, 750-8202\/025-002_firmware, 750-8202\/040-000, 750-8202\/040-000_firmware
CVE-2021-34567 (published 2022-11-09)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Weakness: CWE-125
Affected vendors: wago
Affected products: 750-8100, 750-8100_firmware, 750-8101, 750-8101\/025-000, 750-8101\/025-000_firmware, 750-8101_firmware, 750-8102, 750-8102\/025-000, 750-8102\/025-000_firmware, 750-8102_firmware, 750-8202, 750-8202\/000-011, 750-8202\/000-011_firmware, 750-8202\/000-012, 750-8202\/000-012_firmware, 750-8202\/000-022, 750-8202\/000-022_firmware, 750-8202\/025-000, 750-8202\/025-000_firmware, 750-8202\/025-001, 750-8202\/025-001_firmware, 750-8202\/025-002, 750-8202\/025-002_firmware, 750-8202\/040-000, 750-8202\/040-000_firmware
CVE-2021-34568 (published 2022-11-09)
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: wago
Affected products: 750-8100, 750-8100_firmware, 750-8101, 750-8101\/025-000, 750-8101\/025-000_firmware, 750-8101_firmware, 750-8102, 750-8102\/025-000, 750-8102\/025-000_firmware, 750-8102_firmware, 750-8202, 750-8202\/000-011, 750-8202\/000-011_firmware, 750-8202\/000-012, 750-8202\/000-012_firmware, 750-8202\/000-022, 750-8202\/000-022_firmware, 750-8202\/025-000, 750-8202\/025-000_firmware, 750-8202\/025-001, 750-8202\/025-001_firmware, 750-8202\/025-002, 750-8202\/025-002_firmware, 750-8202\/040-000, 750-8202\/040-000_firmware
CVE-2021-34569 (published 2022-11-09)
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: wago
Affected products: 750-8100, 750-8100_firmware, 750-8101, 750-8101\/025-000, 750-8101\/025-000_firmware, 750-8101_firmware, 750-8102, 750-8102\/025-000, 750-8102\/025-000_firmware, 750-8102_firmware, 750-8202, 750-8202\/000-011, 750-8202\/000-011_firmware, 750-8202\/000-012, 750-8202\/000-012_firmware, 750-8202\/000-022, 750-8202\/000-022_firmware, 750-8202\/025-000, 750-8202\/025-000_firmware, 750-8202\/025-001, 750-8202\/025-001_firmware, 750-8202\/025-002, 750-8202\/025-002_firmware, 750-8202\/040-000, 750-8202\/040-000_firmware
CVE-2021-3457 (published 2021-05-12)
An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Weakness: CWE-863
Affected vendors: theforeman
Affected products: smart_proxy_shell_hooks
CVE-2021-34570 (published 2021-09-27)
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: phoenixcontact
Affected products: axc_f_1152, axc_f_1152_firmware, axc_f_2152, axc_f_2152_firmware, axc_f_2152_starterkit, axc_f_2152_starterkit_firmware, axc_f_3152, axc_f_3152_firmware, plcnext_technology_starterkit, plcnext_technology_starterkit_firmware, rfc_4072s, rfc_4072s_firmware
CVE-2021-34571 (published 2021-09-16)
Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: enbra
Affected products: ewm
CVE-2021-34572 (published 2021-09-16)
Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-345
Affected vendors: enbra
Affected products: ewm
CVE-2021-34573 (published 2021-09-16)
In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-682
Affected vendors: enbra
Affected products: ewm
CVE-2021-34574 (published 2021-08-02)
In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-669
Affected vendors: helmholz, mbconnectline
Affected products: mbconnect24, mymbconnect24, myrex24, myrex24.virtual
CVE-2021-34575 (published 2021-08-02)
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: mbconnectline
Affected products: mbconnect24, mymbconnect24
CVE-2021-34576 (published 2021-09-16)
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-203
Affected vendors: kadenvodomery
Affected products: picoflux_air, picoflux_air_firmware
CVE-2021-34577 (published 2022-11-09)
In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded shared key while being adjacent to the device.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: kadenvodomery
Affected products: picoflux_air, picoflux_air_firmware
CVE-2021-34578 (published 2021-08-31)
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: wago
Affected products: 750-362, 750-362_firmware, 750-363, 750-363_firmware, 750-823, 750-823_firmware, 750-832, 750-832\/000-002, 750-832\/000-002_firmware, 750-832_firmware, 750-862, 750-862_firmware, 750-890\/025-000, 750-890\/025-000_firmware, 750-890\/025-001, 750-890\/025-001_firmware, 750-890\/025-002, 750-890\/025-002_firmware, 750-890\/040-000, 750-890\/040-000_firmware, 750-891, 750-891_firmware, 750-893, 750-893_firmware
CVE-2021-34579 (published 2022-11-09)
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-269
Affected vendors: phoenixcontact
Affected products: fl_mguard_dm
CVE-2021-3458 (published 2021-08-17)
The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: motorola
Affected products: mm1000, mm1000_firmware
CVE-2021-34580 (published 2021-10-27)
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-204
Affected vendors: mbconnectline
Affected products: mbconnect24, mymbconnect24
CVE-2021-34581 (published 2021-08-31)
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-772
Affected vendors: wago
Affected products: 750-831, 750-831\/000-002, 750-831\/000-002_firmware, 750-831_firmware, 750-880, 750-880\/025-000, 750-880\/025-000_firmware, 750-880\/025-001, 750-880\/025-001_firmware, 750-880\/025-002, 750-880\/025-002_firmware, 750-880\/040-000, 750-880\/040-000_firmware, 750-880_firmware, 750-881, 750-881_firmware, 750-889, 750-889_firmware
CVE-2021-34582 (published 2021-11-10)
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: phoenixcontact
Affected products: fl_mguard_1102, fl_mguard_1102_firmware, fl_mguard_1105, fl_mguard_1105_firmware
CVE-2021-34583 (published 2021-10-26)
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-122
Affected vendors: codesys, wago
Affected products: 750-8202, 750-8202_firmware, 750-8203, 750-8203_firmware, 750-8204, 750-8204_firmware, 750-8206, 750-8206_firmware, 750-8207, 750-8207_firmware, 750-8208, 750-8208_firmware, 750-8210, 750-8210_firmware, 750-8211, 750-8211_firmware, 750-8212, 750-8212_firmware, 750-8213, 750-8213_firmware, 750-8214, 750-8214_firmware, 750-8216, 750-8216_firmware, 750-8217
CVE-2021-34584 (published 2021-10-26)
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-126
Affected vendors: codesys, wago
Affected products: 750-8202, 750-8202_firmware, 750-8203, 750-8203_firmware, 750-8204, 750-8204_firmware, 750-8206, 750-8206_firmware, 750-8207, 750-8207_firmware, 750-8208, 750-8208_firmware, 750-8210, 750-8210_firmware, 750-8211, 750-8211_firmware, 750-8212, 750-8212_firmware, 750-8213, 750-8213_firmware, 750-8214, 750-8214_firmware, 750-8216, 750-8216_firmware, 750-8217
CVE-2021-34585 (published 2021-10-26)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-252
Affected vendors: codesys, wago
Affected products: 750-8202, 750-8202_firmware, 750-8203, 750-8203_firmware, 750-8204, 750-8204_firmware, 750-8206, 750-8206_firmware, 750-8207, 750-8207_firmware, 750-8208, 750-8208_firmware, 750-8210, 750-8210_firmware, 750-8211, 750-8211_firmware, 750-8212, 750-8212_firmware, 750-8213, 750-8213_firmware, 750-8214, 750-8214_firmware, 750-8216, 750-8216_firmware, 750-8217
CVE-2021-34586 (published 2021-10-26)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: codesys, wago
Affected products: 750-8202, 750-8202_firmware, 750-8203, 750-8203_firmware, 750-8204, 750-8204_firmware, 750-8206, 750-8206_firmware, 750-8207, 750-8207_firmware, 750-8208, 750-8208_firmware, 750-8210, 750-8210_firmware, 750-8211, 750-8211_firmware, 750-8212, 750-8212_firmware, 750-8213, 750-8213_firmware, 750-8214, 750-8214_firmware, 750-8216, 750-8216_firmware, 750-8217
CVE-2021-34587 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-121
Affected vendors: bender, ibm
Affected products: _ibm_rational_lifecycle_integration_adapter_for_windchill, cc612, cc612_firmware, cc613, cc613_firmware, icc15xx, icc15xx_firmware, icc16xx, icc16xx_firmware
CVE-2021-34588 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-425
Affected vendors: bender
Affected products: cc612, cc612_firmware, cc613, icc15xx_firmware
CVE-2021-34589 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: bender
Affected products: cc612, cc612_firmware, cc613, cc613_firmware, icc15xx, icc15xx_firmware, icc16xx, icc16xx_firmware, icc613_firmware
CVE-2021-3459 (published 2021-08-17)
A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: motorola
Affected products: mm1000, mm1000_firmware
CVE-2021-34590 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: bender
Affected products: cc612, cc612_firmware, cc613, icc15xx_firmware
CVE-2021-34591 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-250
Affected vendors: bender
Affected products: cc612, cc612_firmware, cc613, icc15xx_firmware
CVE-2021-34592 (published 2022-04-27)
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: bender
Affected products: cc612, cc612_firmware, cc613, icc15xx_firmware