deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-1474
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information. IBM X-force ID: 140692.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140692; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140692
CVE: CVE-2018-1476
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140757; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140757
CVE: CVE-2018-1478
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 140760.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140760; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140760
CVE: CVE-2018-1480
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookies. If a Cross-Site Scripting vulnerability also existed attackers may be able to get the cookie values via malicious JavaScript and then hijack the user session. IBM X-Force ID: 140762.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140762; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140762
CVE: CVE-2018-1481
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 140763.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140763; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140763
CVE: CVE-2018-1484
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 140969.
CVSS Score: 3.7 (LOW)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140969; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140969
CVE: CVE-2018-1485
Published: 2018-12-12
Description: IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 140970.
CVSS Score: 3.1 (LOW)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/140970; https://www.ibm.com/support/docview.wss?uid=ibm10733605; https://exchange.xforce.ibmcloud.com/vulnerabilities/140970
CVE: CVE-2018-1901
Published: 2018-12-12
Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. IBM X-Force ID: 152530.
CVSS Score: 5.0 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/152530; https://www.ibm.com/support/docview.wss?uid=ibm10738727; https://exchange.xforce.ibmcloud.com/vulnerabilities/152530
CVE: CVE-2018-1926
Published: 2018-12-12
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious URL, a remote attacker could send a specially-crafted request. An attacker could exploit this vulnerability to perform CSRF attack and update available applications. IBM X-Force ID: 152992.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/106204; https://exchange.xforce.ibmcloud.com/vulnerabilities/152992; https://www.ibm.com/support/docview.wss?uid=ibm10742301
CVE: CVE-2018-20101
Published: 2018-12-12
Description: The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers; https://wpvulndb.com/vulnerabilities/9176; https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
CVE: CVE-2018-20102
Published: 2018-12-12
Description: An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing anything that was left on the stack, or even past the end of the 8193-byte buffer, depending on the value of accepted_payload_size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=efbbdf72992cd[PII_REDACTED]2346044cafd9331c0; http://www.securityfocus.com/bid/106223; https://access.redhat.com/errata/RHBA-2019:0326
CVE: CVE-2018-20103
Published: 2018-12-12
Description: An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f83d1cca25; http://www.securityfocus.com/bid/106280; https://access.redhat.com/errata/RHBA-2019:0326
CVE: CVE-2018-15717
Published: 2018-12-12
Description: Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-916, CWE-522
References: https://www.tenable.com/security/research/tra-2018-44; https://www.tenable.com/security/research/tra-2018-44
CVE: CVE-2018-15718
Published: 2018-12-12
Description: Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://www.tenable.com/security/research/tra-2018-44; https://www.tenable.com/security/research/tra-2018-44
CVE: CVE-2018-15719
Published: 2018-12-12
Description: Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255, CWE-521
References: https://www.tenable.com/security/research/tra-2018-44; https://www.tenable.com/security/research/tra-2018-44
CVE: CVE-2018-6704
Published: 2018-12-12
Description: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-377
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10259; https://kc.mcafee.com/corporate/index?page=content&id=SB10259
CVE: CVE-2018-6705
Published: 2018-12-12
Description: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-377
References: http://www.securityfocus.com/bid/106328; https://kc.mcafee.com/corporate/index?page=content&id=SB10260; http://www.securityfocus.com/bid/106328
CVE: CVE-2018-6706
Published: 2018-12-12
Description: Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-377
References: http://www.securityfocus.com/bid/106328; https://kc.mcafee.com/corporate/index?page=content&id=SB10260; http://www.securityfocus.com/bid/106328
CVE: CVE-2018-20127
Published: 2018-12-13
Description: An issue was discovered in zzzphp cms 1.5.8. del_file in /admin/save.php allows remote attackers to delete arbitrary files via a mixed-case extension and an extra '.' character, because (for example) "php" is blocked but path=F:/1.phP. succeeds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.iwantacve.cn/index.php/archives/89/; http://www.iwantacve.cn/index.php/archives/89/
CVE: CVE-2018-20128
Published: 2018-12-13
Description: An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.iwantacve.cn/index.php/archives/90/; http://www.iwantacve.cn/index.php/archives/90/
CVE: CVE-2018-20129
Published: 2018-12-13
Description: An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows remote attackers to upload and execute arbitrary PHP code via a double extension and a modified ".php" substring, in conjunction with the image/jpeg content type, as demonstrated by the filename=1.jpg.p*hp value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.iwantacve.cn/index.php/archives/88/; http://www.iwantacve.cn/index.php/archives/88/
CVE: CVE-2018-7690
Published: 2018-12-13
Description: A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
CVSS Score: 6.5 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03298201; https://www.exploit-db.com/exploits/45989/; https://softwaresupport.softwaregrp.com/doc/KM03298201
CVE: CVE-2018-7691
Published: 2018-12-13
Description: A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
CVSS Score: 6.5 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03298201; https://www.exploit-db.com/exploits/45990/; https://softwaresupport.softwaregrp.com/doc/KM03298201
CVE: CVE-2018-8033
Published: 2018-12-13
Description: In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName, serviceMode, and serviceContext. The exploitation occurs by having DOCTYPEs pointing to external references that trigger a payload that returns secret information from the host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777%40%3Cuser.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777%40%3Cuser.ofbiz.apache.org%3E
CVE: CVE-2017-1268
Published: 2018-12-13
Description: IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/106339; https://exchange.xforce.ibmcloud.com/vulnerabilities/124743; https://www.ibm.com/support/docview.wss?uid=ibm10737077
CVE: CVE-2018-13804
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.4). An attacker with network access to the installation could bypass the application-level authentication. In order to exploit the vulnerability, an attacker must obtain network access to an affected installation and must obtain a valid username to the system. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105924; https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf; http://www.securityfocus.com/bid/105924
CVE: CVE-2018-13811
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-916, CWE-200
References: http://www.securityfocus.com/bid/105926; https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf; http://www.securityfocus.com/bid/105926
CVE: CVE-2018-13812
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V15 Update 4), SIMATIC WinCC Runtime Professional (All versions < V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions < V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/105922; https://cert-portal.siemens.com/productcert/pdf/ssa-233109.pdf; http://www.securityfocus.com/bid/105922
CVE: CVE-2018-13813
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V15 Update 4), SIMATIC WinCC Runtime Professional (All versions < V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions < V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The webserver of affected HMI devices may allow URL redirections to untrusted websites. An attacker must trick a valid user who is authenticated to the device into clicking on a malicious link to exploit the vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 8.1 (HIGH)
CWE: CWE-601, CWE-601
References: http://www.securityfocus.com/bid/105922; https://cert-portal.siemens.com/productcert/pdf/ssa-233109.pdf; http://www.securityfocus.com/bid/105922
CVE: CVE-2018-13814
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V14), SIMATIC WinCC Runtime Advanced (All versions < V14), SIMATIC WinCC Runtime Professional (All versions < V14), SIMATIC WinCC (TIA Portal) (All versions < V14), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The integrated web server (port 80/tcp and port 443/tcp) of the affected devices could allow an attacker to inject HTTP headers. An attacker must trick a valid user who is authenticated to the device into clicking on a malicious link to exploit the vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 8.8 (HIGH)
CWE: CWE-113, CWE-20
References: http://www.securityfocus.com/bid/105931; https://cert-portal.siemens.com/productcert/pdf/ssa-944083.pdf; http://www.securityfocus.com/bid/105931
CVE: CVE-2018-13815
Published: 2018-12-13
Description: A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-410, CWE-400
References: http://www.securityfocus.com/bid/105928; https://cert-portal.siemens.com/productcert/pdf/ssa-584286.pdf; http://www.securityfocus.com/bid/105928
CVE: CVE-2018-1653
Published: 2018-12-13
Description: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144726.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10787785; http://www.securityfocus.com/bid/106272; https://exchange.xforce.ibmcloud.com/vulnerabilities/144726
CVE: CVE-2018-16555
Published: 2018-12-13
Description: A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1), SCALANCE S623 (All versions < V4.0.1.1), SCALANCE S627-2M (All versions < V4.0.1.1). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: http://www.securityfocus.com/bid/105937; https://cert-portal.siemens.com/productcert/pdf/ssa-242982.pdf; http://www.securityfocus.com/bid/105937
CVE: CVE-2018-16556
Published: 2018-12-13
Description: A vulnerability has been identified in  SIMATIC S7-400 CPU 412-1 DP V7 (All versions),  SIMATIC S7-400 CPU 412-2 DP V7 (All versions),  SIMATIC S7-400 CPU 414-2 DP V7 (All versions),  SIMATIC S7-400 CPU 414-3 DP V7 (All versions),  SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 416-2 DP V7 (All versions),  SIMATIC S7-400 CPU 416-3 DP V7 (All versions),  SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 416F-2 DP V7 (All versions),  SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3),  SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Specially crafted packets sent to port 102/tcp via Ethernet interface, via
PROFIBUS, or via Multi Point Interfaces (MPI) could cause the affected
devices to go into defect mode. Manual reboot is required to resume normal
operation.

Successful exploitation requires an attacker to be able to send specially
crafted packets to port 102/tcp via Ethernet interface, via PROFIBUS or Multi
Point Interfaces (MPI). No user interaction and no user privileges are
required to exploit the security vulnerability. The vulnerability could allow
causing a denial of service condition of the core functionality of the CPU,
compromising the availability of the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-113131.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-113131.pdf