deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-1257
Published: 2017-12-20
Description: IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 124684.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010431; http://www.securityfocus.com/bid/102308; https://exchange.xforce.ibmcloud.com/vulnerabilities/124684
CVE: CVE-2017-1261
Published: 2017-12-20
Description: IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010437; https://exchange.xforce.ibmcloud.com/vulnerabilities/124736; http://www.ibm.com/support/docview.wss?uid=swg22010437
CVE: CVE-2017-1262
Published: 2017-12-20
Description: IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 124737.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-113
References: http://www.ibm.com/support/docview.wss?uid=swg22010438; https://exchange.xforce.ibmcloud.com/vulnerabilities/124737; http://www.ibm.com/support/docview.wss?uid=swg22010438
CVE: CVE-2017-1266
Published: 2017-12-20
Description: IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 124741.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-732
References: http://www.ibm.com/support/docview.wss?uid=swg22011516; https://exchange.xforce.ibmcloud.com/vulnerabilities/124741; http://www.ibm.com/support/docview.wss?uid=swg22011516
CVE: CVE-2017-1270
Published: 2017-12-20
Description: IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.
CVSS Score: 3.3 (LOW)
CWE: CWE-384
References: http://www.ibm.com/support/docview.wss?uid=swg22010439; https://exchange.xforce.ibmcloud.com/vulnerabilities/124745; http://www.ibm.com/support/docview.wss?uid=swg22010439
CVE: CVE-2017-1423
Published: 2017-12-20
Description: IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040017; https://exchange.xforce.ibmcloud.com/vulnerabilities/127476; https://www.ibm.com/support/docview.wss?uid=swg22011400
CVE: CVE-2017-1494
Published: 2017-12-20
Description: IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128692.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22008673; http://www.securityfocus.com/bid/102218; http://www.securitytracker.com/id/1040355
CVE: CVE-2017-14962
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14963
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000058.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14964
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300005c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14965
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14966
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14967
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000080.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14968
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c4, a related issue to CVE-2017-17113.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-14969
Published: 2017-12-20
Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.greyhathacker.net/?p=995; http://www.greyhathacker.net/?p=995
CVE: CVE-2017-15532
Published: 2017-12-20
Description: Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal). These types of attacks aim to access files and directories that are stored outside the web root folder. By manipulating variables, it may be possible to access arbitrary files and directories stored on the file system including application source code or configuration and critical system files.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/102096; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171220_00; http://www.securityfocus.com/bid/102096
CVE: CVE-2017-1595
Published: 2017-12-20
Description: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009629; https://exchange.xforce.ibmcloud.com/vulnerabilities/132549; http://www.ibm.com/support/docview.wss?uid=swg22009629
CVE: CVE-2017-1596
Published: 2017-12-20
Description: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009625; https://exchange.xforce.ibmcloud.com/vulnerabilities/132550; http://www.ibm.com/support/docview.wss?uid=swg22009625
CVE: CVE-2017-1598
Published: 2017-12-20
Description: IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://www.ibm.com/support/docview.wss?uid=swg22009621; https://exchange.xforce.ibmcloud.com/vulnerabilities/132611; http://www.ibm.com/support/docview.wss?uid=swg22009621
CVE: CVE-2017-1600
Published: 2017-12-20
Description: IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22009622; https://exchange.xforce.ibmcloud.com/vulnerabilities/132613; http://www.ibm.com/support/docview.wss?uid=swg22009622
CVE: CVE-2017-1631
Published: 2017-12-20
Description: IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22011307; https://exchange.xforce.ibmcloud.com/vulnerabilities/133140; http://www.ibm.com/support/docview.wss?uid=swg22011307
CVE: CVE-2017-1694
Published: 2017-12-20
Description: IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319
References: http://www.ibm.com/support/docview.wss?uid=swg22011695; http://www.securityfocus.com/bid/102215; https://exchange.xforce.ibmcloud.com/vulnerabilities/134165
CVE: CVE-2017-1696
Published: 2017-12-20
Description: IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 134178.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22011730; https://exchange.xforce.ibmcloud.com/vulnerabilities/134178; http://www.ibm.com/support/docview.wss?uid=swg22011730
CVE: CVE-2017-1746
Published: 2017-12-20
Description: IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22011308; https://exchange.xforce.ibmcloud.com/vulnerabilities/135519; http://www.ibm.com/support/docview.wss?uid=swg22011308
CVE: CVE-2017-1751
Published: 2017-12-20
Description: IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135546.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22011185; http://www.securityfocus.com/bid/102217; https://exchange.xforce.ibmcloud.com/vulnerabilities/135546
CVE: CVE-2017-1757
Published: 2017-12-20
Description: IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.ibm.com/support/docview.wss?uid=swg22011554; http://www.securityfocus.com/bid/102300; https://exchange.xforce.ibmcloud.com/vulnerabilities/135858
CVE: CVE-2017-16717
Published: 2017-12-20
Description: A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution.
CVSS Score: 8.6 (HIGH)
CWE: CWE-122, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-353-05; https://ics-cert.us-cert.gov/advisories/ICSA-17-353-05
CVE: CVE-2017-16725
Published: 2017-12-20
Description: A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102125; https://ics-cert.us-cert.gov/advisories/ICSA-17-341-01; http://www.securityfocus.com/bid/102125
CVE: CVE-2017-16731
Published: 2017-12-20
Description: An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-523, CWE-522
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-353-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-353-01
CVE: CVE-2017-16733
Published: 2017-12-20
Description: A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03; https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03
CVE: CVE-2017-16735
Published: 2017-12-20
Description: A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which generates an error in the database log.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03; https://ics-cert.us-cert.gov/advisories/ICSA-17-353-03
CVE: CVE-2017-17745
Published: 2017-12-20
Description: Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java script via the 'sysName' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Dec/67; http://seclists.org/fulldisclosure/2017/Dec/67
CVE: CVE-2017-17746
Published: 2017-12-20
Description: Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306
References: http://seclists.org/fulldisclosure/2017/Dec/67; http://seclists.org/fulldisclosure/2017/Dec/67
CVE: CVE-2017-17747
Published: 2017-12-20
Description: Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a denial of service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: http://seclists.org/fulldisclosure/2017/Dec/67; http://seclists.org/fulldisclosure/2017/Dec/67
CVE: CVE-2017-6094
Published: 2017-12-20
Description: CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain "chk" value (48bit) derived from the MAC. The algorithm used to compute the "chk" was disclosed by reverse engineering the CPE's firmware. As a result, it is possible to forge valid "chk" values for any given MAC address and therefore receive the configuration settings of other subscribers' CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Dec/62; http://seclists.org/fulldisclosure/2017/Dec/62
CVE: CVE-2012-2576
Published: 2017-12-20
Description: SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18818; http://www.exploit-db.com/exploits/18833; http://www.securityfocus.com/bid/51639
CVE: CVE-2011-4955
Published: 2017-12-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) p parameters to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611; http://secunia.com/advisories/45234; http://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407
CVE: CVE-2017-5254
Published: 2017-12-20
Description: In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for other accounts, including admin, after disabling a client-side protection mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-269
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5255
Published: 2017-12-20
Description: In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://www.exploit-db.com/exploits/43413/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5256
Published: 2017-12-20
Description: In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting (XSS) injection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5257
Published: 2017-12-20
Description: In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) community string can insert XSS strings in certain SNMP OIDs which will execute in the context of the currently-logged on user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5258
Published: 2017-12-20
Description: In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using the attacker's supplied config file, including the inserted XSS strings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5259
Published: 2017-12-20
Description: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-489, CWE-319
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5260
Published: 2017-12-20
Description: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference (DRO) at http://<device-ip-or-hostname>/goform/down_cfg_file by this otherwise low privilege 'user' account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-472, CWE-732
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5261
Published: 2017-12-20
Description: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-472, CWE-22
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5262
Published: 2017-12-20
Description: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200, CWE-200
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
CVE: CVE-2017-5263
Published: 2017-12-20
Description: Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-352
References: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/; https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/