deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-4904
Published: 2017-06-07
Description: The XHCI controller in VMware ESXi 6.5 without patch ESXi[PII_REDACTED]10-SG, 6.0 U3 without patch ESXi[PII_REDACTED]01-SG, 6.0 U2 without patch ESXi[PII_REDACTED]03-SG, 6.0 U1 without patch ESXi[PII_REDACTED]02-SG, and 5.5 without patch ESXi[PII_REDACTED]01-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97165; http://www.securitytracker.com/id/1038148; http://www.securitytracker.com/id/1038149
CVE: CVE-2017-4905
Published: 2017-06-07
Description: VMware ESXi 6.5 without patch ESXi[PII_REDACTED]10-SG, 6.0 U3 without patch ESXi[PII_REDACTED]01-SG, 6.0 U2 without patch ESXi[PII_REDACTED]03-SG, 6.0 U1 without patch ESXi[PII_REDACTED]02-SG, 5.5 without patch ESXi[PII_REDACTED]01-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://www.securityfocus.com/bid/97164; http://www.securitytracker.com/id/1038148; http://www.securitytracker.com/id/1038149
CVE: CVE-2017-7965
Published: 2017-06-07
Description: A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/; http://www.securityfocus.com/bid/98449; http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/
CVE: CVE-2017-7966
Published: 2017-06-07
Description: A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02/; http://www.securityfocus.com/bid/98446; http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02/
CVE: CVE-2017-9355
Published: 2017-06-07
Description: XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt; http://packetstormsecurity.com/files/142795/Subsonic-6.1.1-XML-External-Entity-Attack.html; https://www.exploit-db.com/exploits/42119/
CVE: CVE-2015-5175
Published: 2017-06-07
Description: Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/08/26/3; http://www.securityfocus.com/bid/76486; https://cxf.apache.org/security-advisories.data/CVE-2015-5175.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2
CVE: CVE-2015-5202
Published: 2017-06-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5233. Reason: This candidate is a reservation duplicate of CVE-2015-5233. Notes: All CVE users should reference CVE-2015-5233 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-5232
Published: 2017-06-07
Description: Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2015/09/22/17; https://bugzilla.redhat.com/show_bug.cgi?id=1257098; https://github.com/01org/opa-ff/commit/080ab97461d80a01636f77ba6aecc667c3c0087c
CVE: CVE-2015-6240
Published: 2017-06-07
Description: The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2015/08/17/10; https://bugzilla.redhat.com/show_bug.cgi?id=1243468; https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647
CVE: CVE-2015-6540
Published: 2017-06-07
Description: Cross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/134767/Intellect-Core-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/537068/100/0/threaded; http://packetstormsecurity.com/files/134767/Intellect-Core-Cross-Site-Scripting.html
CVE: CVE-2015-6959
Published: 2017-06-07
Description: Cross-site scripting (XSS) vulnerability in Vindula 1.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.youtube.com/watch?v=-WXWqNBEQQc; https://www.youtube.com/watch?v=-WXWqNBEQQc
CVE: CVE-2015-8235
Published: 2017-06-07
Description: Directory traversal vulnerability in Spiffy before 5.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commit%3Bh=edd4926bb4f4c97760a0e03b0d0e8210398fe967; http://www.openwall.com/lists/oss-security/2015/11/18/25; http://www.securityfocus.com/bid/77644
CVE: CVE-2015-8538
Published: 2017-06-07
Description: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/12/10/3; https://bugzilla.redhat.com/show_bug.cgi?id=1291299; http://www.openwall.com/lists/oss-security/2015/12/10/3
CVE: CVE-2016-4973
Published: 2017-06-07
Description: Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/08/17/6; http://www.securityfocus.com/bid/92530; https://bugzilla.redhat.com/show_bug.cgi?id=1324759
CVE: CVE-2014-9310
Published: 2017-06-07
Description: Cross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/75082; https://security.szurek.pl/wordpress-backup-to-dropbox-40-reflected-xss.html; https://wordpress.org/plugins/wordpress-backup-to-dropbox/
CVE: CVE-2015-3295
Published: 2017-06-07
Description: markdown-it before 4.1.0 does not block data: URLs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2015/04/10/10; http://www.securityfocus.com/bid/71824; https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3
CVE: CVE-2015-7346
Published: 2017-06-07
Description: SQL injection vulnerability in ZCMS 1.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://hyp3rlinx.altervista.org/advisories/AS-ZCMS0612.txt; http://packetstormsecurity.com/files/132286/ZCMS-1.1-Cross-Site-Scripting-SQL-Injection.html; https://www.exploit-db.com/exploits/37272/
CVE: CVE-2017-7180
Published: 2017-06-08
Description: Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.
CVSS Score: 7.3 (HIGH)
CWE: CWE-428
References: https://www.exploit-db.com/exploits/42141/; https://www.exploit-db.com/exploits/42141/
CVE: CVE-2017-4901
Published: 2017-06-08
Description: The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96881; http://www.securitytracker.com/id/1038025; https://www.vmware.com/security/advisories/VMSA-2017-0005.html
CVE: CVE-2017-4907
Published: 2017-06-08
Description: VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97914; http://www.securitytracker.com/id/1038281; http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE: CVE-2017-4908
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97912; http://www.securitytracker.com/id/1038280; http://www.securitytracker.com/id/1038281
CVE: CVE-2017-4909
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97911; http://www.securitytracker.com/id/1038280; http://www.securitytracker.com/id/1038281
CVE: CVE-2017-4910
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97913; http://www.securitytracker.com/id/1038280; http://www.securitytracker.com/id/1038281
CVE: CVE-2017-4911
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97916; http://www.securitytracker.com/id/1038280; http://www.securitytracker.com/id/1038281
CVE: CVE-2017-4912
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97921; http://www.securitytracker.com/id/1038280; http://www.securitytracker.com/id/1038281
CVE: CVE-2017-4913
Published: 2017-06-08
Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97920; http://www.securitytracker.com/id/1038281; http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE: CVE-2017-6638
Published: 2017-06-08
Description: A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-20
References: http://www.securityfocus.com/bid/98938; http://www.securitytracker.com/id/1038627; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-anyconnect
CVE: CVE-2017-6639
Published: 2017-06-08
Description: A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the lack of authentication and authorization mechanisms for a debugging tool that was inadvertently enabled in the affected software. An attacker could exploit this vulnerability by remotely connecting to the debugging tool via TCP. A successful exploit could allow the attacker to access sensitive information about the affected software or execute arbitrary code with root privileges on the affected system. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software Releases 10.1(1) and 10.1(2) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd09961.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-16, CWE-862
References: http://www.securityfocus.com/bid/98935; http://www.securitytracker.com/id/1038626; https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03762en_us
CVE: CVE-2017-6640
Published: 2017-06-08
Description: A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-770
References: http://www.securityfocus.com/bid/98937; http://www.securitytracker.com/id/1038625; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2
CVE: CVE-2017-6648
Published: 2017-06-08
Description: A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms within the software. An attacker could exploit this vulnerability by sending a flood of SIP INVITE packets to the affected device. An exploit could allow the attacker to impact the availability of services and data of the device, including a complete DoS condition. This vulnerability affects the following Cisco TC and CE platforms when running software versions prior to TC 7.3.8 and CE 8.3.0. Cisco Bug IDs: CSCux94002.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/98934; http://www.securitytracker.com/id/1038624; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-tele
CVE: CVE-2017-9516
Published: 2017-06-08
Description: Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://craftcms.com/changelog#2-6-2982; https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html; https://twitter.com/CraftCMS/status/[PII_REDACTED]12937984
CVE: CVE-2017-9517
Published: 2017-06-08
Description: atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6; https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6
CVE: CVE-2017-9518
Published: 2017-06-08
Description: atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6; https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6
CVE: CVE-2017-9519
Published: 2017-06-08
Description: atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6; https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6
CVE: CVE-2017-9520
Published: 2017-06-08
Description: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/radare/radare2/commit/f85bc674b2a2256a364fe796351bc1971e106005; https://github.com/radare/radare2/issues/7698; https://github.com/radare/radare2/commit/f85bc674b2a2256a364fe796351bc1971e106005
CVE: CVE-2014-4843
Published: 2017-06-08
Description: Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-358
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698548; http://www.securityfocus.com/bid/73943; http://www-01.ibm.com/support/docview.wss?uid=swg21698548
CVE: CVE-2014-6031
Published: 2017-06-08
Description: Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: https://support.f5.com/csp/article/K16196; https://support.f5.com/csp/article/K16196
CVE: CVE-2014-8687
Published: 2017-06-08
Description: Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: http://packetstormsecurity.com/files/130585/Seagate-Business-NAS-2014.00319-Remote-Code-Execution.html; http://packetstormsecurity.com/files/130609/Seagate-Business-NAS-Unauthenticated-Remote-Command-Execution.html; http://www.securityfocus.com/bid/72831
CVE: CVE-2015-2251
Published: 2017-06-08
Description: The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm
CVE: CVE-2015-2252
Published: 2017-06-08
Description: Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm
CVE: CVE-2015-2253
Published: 2017-06-08
Description: The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm