deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32747
Published: 2021-07-12
Description: Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and values on configuration objects in Icinga 2. These are commonly used to reference secrets in other configurations such as check commands to be able to authenticate with a service being checked. Icinga Web 2 displays these custom variables to logged in users with access to said hosts or services. In order to protect the secrets from being visible to anyone, it's possible to setup protection rules and blacklists in a user's role. Protection rules result in `***` being shown instead of the original value, the key will remain. Backlists will hide a custom variable entirely from the user. Besides using the UI, custom variables can also be accessed differently by using an undocumented URL parameter. By adding a parameter to the affected routes, Icinga Web 2 will show these columns additionally in the respective list. This parameter is also respected when exporting to JSON or CSV. Protection rules and blacklists however have no effect in this case. Custom variables are shown as-is in the result. The issue has been fixed in the 2.9.0, 2.8.3, and 2.7.5 releases. As a workaround, one may set up a restriction to hide hosts and services with the custom variable in question.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/Icinga/icingaweb2/releases/tag/v2.7.5; https://github.com/Icinga/icingaweb2/releases/tag/v2.8.3; https://github.com/Icinga/icingaweb2/releases/tag/v2.9.0
CVE: CVE-2021-32754
Published: 2021-07-12
Description: FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity (XXE) vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based format for sources and sinks had to be used and the attacker had to able control the source/sink definition file. The vulnerability was patched in version 2.9.0. As a workaround, do not allow untrusted entities to control the source/sink definition file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://github.com/secure-software-engineering/FlowDroid/security/advisories/GHSA-39r7-275f-rvgw; https://github.com/secure-software-engineering/FlowDroid/security/advisories/GHSA-39r7-275f-rvgw
CVE: CVE-2020-11307
Published: 2021-07-13
Description: Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1886
Published: 2021-07-13
Description: Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1887
Published: 2021-07-13
Description: An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1888
Published: 2021-07-13
Description: Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1889
Published: 2021-07-13
Description: Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1890
Published: 2021-07-13
Description: Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1896
Published: 2021-07-13
Description: Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1897
Published: 2021-07-13
Description: Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1898
Published: 2021-07-13
Description: Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1899
Published: 2021-07-13
Description: Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1901
Published: 2021-07-13
Description: Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1907
Published: 2021-07-13
Description: Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1931
Published: 2021-07-13
Description: Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1938
Published: 2021-07-13
Description: Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1940
Published: 2021-07-13
Description: Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html
CVE: CVE-2021-1943
Published: 2021-07-13
Description: Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1945
Published: 2021-07-13
Description: Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1953
Published: 2021-07-13
Description: Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1954
Published: 2021-07-13
Description: Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1955
Published: 2021-07-13
Description: Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1964
Published: 2021-07-13
Description: Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1965
Published: 2021-07-13
Description: Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-1970
Published: 2021-07-13
Description: Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
CVE: CVE-2021-35515
Published: 2021-07-13
Description: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834, CWE-835
References: http://www.openwall.com/lists/oss-security/2021/07/13/1; https://commons.apache.org/proper/commons-compress/security-reports.html; https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab%40%3Cuser.commons.apache.org%3E
CVE: CVE-2021-35516
Published: 2021-07-13
Description: When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130, CWE-770
References: http://www.openwall.com/lists/oss-security/2021/07/13/2; https://commons.apache.org/proper/commons-compress/security-reports.html; https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E
CVE: CVE-2021-35517
Published: 2021-07-13
Description: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130, CWE-770
References: http://www.openwall.com/lists/oss-security/2021/07/13/3; http://www.openwall.com/lists/oss-security/2021/07/13/5; https://commons.apache.org/proper/commons-compress/security-reports.html
CVE: CVE-2021-36090
Published: 2021-07-13
Description: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: http://www.openwall.com/lists/oss-security/2021/07/13/4; http://www.openwall.com/lists/oss-security/2021/07/13/6; https://commons.apache.org/proper/commons-compress/security-reports.html
CVE: CVE-2020-26153
Published: 2021-07-13
Description: A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventespresso/event-espresso-core/compare/4.10.6.p...4.10.7.p; https://labs.nettitude.com/blog/cve-2020-26153-event-espresso-core-cross-site-scripting/; https://github.com/eventespresso/event-espresso-core/compare/4.10.6.p...4.10.7.p
CVE: CVE-2020-28400
Published: 2021-07-13
Description: Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://cert-portal.siemens.com/productcert/html/ssa-599968.html; https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03
CVE: CVE-2021-20595
Published: 2021-07-13
Description: Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior), Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) and Air Conditioning System/BM adapter(BAC-HD150 Ver.2.21 and prior) allows a remote unauthenticated attacker to disclose some of data in the air conditioning system or cause a DoS condition by sending specially crafted packets.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://jvn.jp/vu/JVNVU93086468/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-005_en.pdf; https://jvn.jp/vu/JVNVU93086468/index.html
CVE: CVE-2021-25671
Published: 2021-07-13
Description: A vulnerability has been identified in RWG1.M12 (All versions < V1.16.16), RWG1.M12D (All versions < V1.16.16), RWG1.M8 (All versions < V1.16.16). Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is needed to restore normal operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://cert-portal.siemens.com/productcert/pdf/ssa-448291.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-448291.pdf
CVE: CVE-2021-31892
Published: 2021-07-13
Description: A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERIK Analyze MyPerformance /OEE-Monitor (All versions), SINUMERIK Analyze MyPerformance /OEE-Tuning (All versions), SINUMERIK Integrate Client 02 (All versions >= V02.00.12 < 02.00.18), SINUMERIK Integrate Client 03 (All versions >= V03.00.12 < 03.00.18), SINUMERIK Integrate Client 04 (V04.00.02 and all versions >= V04.00.15 < 04.00.18), SINUMERIK Integrate for Production 4.1 (All versions < V4.1 SP10 HF3), SINUMERIK Integrate for Production 5.1 (V5.1), SINUMERIK Manage MyMachines (All versions), SINUMERIK Manage MyMachines /Remote (All versions), SINUMERIK Manage MyMachines /Spindel Monitor (All versions), SINUMERIK Manage MyPrograms (All versions), SINUMERIK Manage MyResources /Programs (All versions), SINUMERIK Manage MyResources /Tools (All versions), SINUMERIK Manage MyTools (All versions), SINUMERIK Operate V4.8 (All versions < V4.8 SP8), SINUMERIK Operate V4.93 (All versions < V4.93 HF7), SINUMERIK Operate V4.94 (All versions < V4.94 HF5), SINUMERIK Optimize MyProgramming /NX-Cam Editor (All versions). Due to an error in a third-party dependency the ssl flags used for setting up a TLS connection to a server are overwitten with wrong settings. This results in a missing validation of the server certificate and thus in a possible TLS MITM szenario.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-194-04; https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdf
CVE: CVE-2021-31893
Published: 2021-07-13
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-641963.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-641963.pdf
CVE: CVE-2021-31894
Published: 2021-07-13
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf
CVE: CVE-2021-33709
Published: 2021-07-13
Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
CVE: CVE-2021-33710
Published: 2021-07-13
Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf