deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-27844
Published: 2022-04-11
Description: Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70
CVSS Score: 2.7 (LOW)
CWE: CWE-200, CWE-22
References: https://patchstack.com/database/vulnerability/wpvivid-backuprestore/wordpress-wpvivid-plugin-0-9-70-arbitrary-file-read-vulnerability; https://wordpress.org/plugins/wpvivid-backuprestore/#developers; https://patchstack.com/database/vulnerability/wpvivid-backuprestore/wordpress-wpvivid-plugin-0-9-70-arbitrary-file-read-vulnerability
CVE: CVE-2022-27845
Published: 2022-04-11
Description: Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/plausible-analytics/#developers; https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-28541
Published: 2022-04-11
Description: Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22, CWE-427
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28542
Published: 2022-04-11
Description: Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28543
Published: 2022-04-11
Description: Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28544
Published: 2022-04-11
Description: Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28775
Published: 2022-04-11
Description: Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28776
Published: 2022-04-11
Description: Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28777
Published: 2022-04-11
Description: Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28778
Published: 2022-04-11
Description: Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-28779
Published: 2022-04-11
Description: Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-24827
Published: 2022-04-11
Description: Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provided parameter), and a parameterized column of type TEXT. There is the potential for a hacker to provide a carefully crafted query that would bypass server side authorization filters through SQL injection. A recent patch to Elide 6.1.2 allowed the '-' character to be included in parameterized TEXT columns. This character can be interpreted as SQL comments ('--') and allow the attacker to remove the WHERE clause from the generated query and bypass authorization filters. A fix is provided in Elide 6.1.4. The vulnerability only exists for parameterized columns of type TEXT and only for analytic queries (CRUD is not impacted). Workarounds include leveraging a different type of parameterized column (TIME, MONEY, etc) or not leveraging parameterized columns.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/yahoo/elide/pull/2581; https://github.com/yahoo/elide/releases/tag/6.1.4; https://github.com/yahoo/elide/security/advisories/GHSA-8xpj-9j9g-fc9r
CVE: CVE-2022-24832
Published: 2022-04-11
Description: GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape special characters when using the username to construct LDAP queries. While this does not directly allow arbitrary LDAP data exfiltration, it can allow an existing LDAP-authenticated GoCD user with malicious intent to construct and execute malicious queries, allowing them to deduce facts about other users or entries within the LDAP database (e.g alternate fields, usernames, hashed passwords etc) through brute force mechanisms. This only affects users who have a working LDAP authorization configuration enabled on their GoCD server, and only is exploitable by users authenticating using such an LDAP configuration. This issue has been fixed in GoCD 22.1.0, which is bundled with gocd-ldap-authentication-plugin v2.2.0-144.
CVSS Score: 8.2 (HIGH)
CWE: CWE-74
References: https://docs.gocd.org/22.1.0/configuration/dev_authentication.html#ldapad-authentication; https://github.com/gocd/gocd-ldap-authentication-plugin; https://github.com/gocd/gocd-ldap-authentication-plugin/commit/87fa7dac5d899b3960ab48e151881da4793cfcc3
CVE: CVE-2022-24833
Published: 2022-04-11
Description: PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called ZeroBin. The issue is caused by the fact that SVGs can contain JavaScript. This can allow an attacker to execute code, if the user opens a paste with a specifically crafted SVG attachment, and interacts with the preview image and the instance isn't protected by an appropriate content security policy. Users are advised to either upgrade to version 1.4.0 or to ensure the content security policy of their instance is set correctly.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/PrivateBin/PrivateBin/commit/2a4d572c1e9eb9b608d32b0cc0cb3b6c3b684eab; https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-cqcc-mm6x-vmvw; https://github.com/PrivateBin/PrivateBin/commit/2a4d572c1e9eb9b608d32b0cc0cb3b6c3b684eab
CVE: CVE-2022-24837
Published: 2022-04-11
Description: HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable filename after the upload, resulting in potential information leakage of uploaded documents. This is especially relevant for private notes and affects all upload backends, except Lutim and imgur. This issue is patched in version 1.9.3 by replacing the filename generation with UUIDv4. If you cannot upgrade to HedgeDoc 1.9.3, it is possible to block POST requests to `/uploadimage`, which will disable future uploads.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-434
References: https://github.com/hedgedoc/hedgedoc/commit/9e2f9e21e904c4a319e84265da7ef03b0a8e343a; https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-q6vv-2q26-j7rx; https://github.com/node-formidable/formidable/issues/808
CVE: CVE-2022-24838
Published: 2022-04-11
Description: Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the `RCPT TO:<BOOKING USER'S EMAIL> ` SMTP command and begin injecting arbitrary SMTP commands. It is recommended that Calendar is upgraded to 3.2.2. There are no workaround available.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://github.com/nextcloud/calendar/commit/7b70edfb8a0fcf0926f613ababcbd56c6ecd9f35; https://github.com/nextcloud/calendar/pull/4073; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8xv5-4855-24qf
CVE: CVE-2022-24836
Published: 2022-04-11
Description: Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1333, CWE-1333
References: http://seclists.org/fulldisclosure/2022/Dec/23; https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd; https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
CVE: CVE-2022-24839
Published: 2022-04-11
Description: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `>= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d; https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv; https://www.oracle.com/security-alerts/cpujul2022.html
CVE: CVE-2022-28346
Published: 2022-04-12
Description: An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2022/04/11/1; https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce
CVE: CVE-2022-28347
Published: 2022-04-12
Description: A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2022/04/11/1; https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce
CVE: CVE-2022-29080
Published: 2022-04-12
Description: The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/barneycarroll/npm-dependency-versions/issues/6; https://www.npmjs.com/package/npm-dependency-versions; https://github.com/barneycarroll/npm-dependency-versions/issues/6
CVE: CVE-2022-1302
Published: 2022-04-12
Description: In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://libiec61850.com/new-release-1-5-1-of-libiec61850/; https://libiec61850.com/new-release-1-5-1-of-libiec61850/
CVE: CVE-2021-40368
Published: 2022-04-12
Description: A vulnerability has been identified in  SIMATIC S7-400 CPU 412-1 DP V7 (All versions),  SIMATIC S7-400 CPU 412-2 DP V7 (All versions),  SIMATIC S7-400 CPU 412-2 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 414-2 DP V7 (All versions),  SIMATIC S7-400 CPU 414-3 DP V7 (All versions),  SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 416-2 DP V7 (All versions),  SIMATIC S7-400 CPU 416-3 DP V7 (All versions),  SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 416F-2 DP V7 (All versions),  SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions < V10.1), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions < V8.2.3), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Affected devices improperly handle specially crafted packets sent to port 102/tcp.

This could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-557541.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-557541.pdf
CVE: CVE-2021-42029
Published: 2022-04-12
Description: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-350757.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-350757.pdf
CVE: CVE-2022-23448
Published: 2022-04-12
Description: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf
CVE: CVE-2022-23449
Published: 2022-04-12
Description: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf
CVE: CVE-2022-23450
Published: 2022-04-12
Description: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf
CVE: CVE-2022-25622
Published: 2022-04-12
Description: The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.

This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/html/ssa-446448.html; https://cert-portal.siemens.com/productcert/pdf/ssa-446448.pdf; https://cert-portal.siemens.com/productcert/html/ssa-446448.html
CVE: CVE-2022-25650
Published: 2022-04-12
Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.14), Mendix Applications using Mendix 9 (All versions < V9.12.0), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.3). When querying the database, it is possible to sort the results using a protected field. With this an authenticated attacker could extract information about the contents of a protected field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-870917.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-870917.pdf
CVE: CVE-2022-25751
Published: 2022-04-12
Description: A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf