deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24528
Published: 2021-08-30
Description: The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by this plugin, leading to a stored cross site scripting (XSS) vulnerability. Only users with roles capable of managing plugins can modify the plugin's settings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/8b8d316b-96b2-4cdc-9da5-c9ea6108a85b; https://wpscan.com/vulnerability/8b8d316b-96b2-4cdc-9da5-c9ea6108a85b
CVE: CVE-2021-24579
Published: 2021-08-30
Description: The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a PHP Object Injection. Even though the plugin did not contain a suitable gadget to fully exploit the issue, other installed plugins on the blog could allow such issue to be exploited and lead to RCE in some cases.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://wpscan.com/vulnerability/08edce3f-2746-4886-8439-76e44ec76fa8; https://wpscan.com/vulnerability/08edce3f-2746-4886-8439-76e44ec76fa8
CVE: CVE-2021-24580
Published: 2021-08-30
Description: The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/2faccd1b-4b1c-4b3e-b917-de2d05e860f8; https://wpscan.com/vulnerability/2faccd1b-4b1c-4b3e-b917-de2d05e860f8
CVE: CVE-2021-24581
Published: 2021-08-30
Description: The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/75abd073-b45f-4fe6-8501-7a6d0163f78d; https://wpscan.com/vulnerability/75abd073-b45f-4fe6-8501-7a6d0163f78d
CVE: CVE-2021-24592
Published: 2021-08-30
Description: The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9579ff13-9597-4a77-8cb9-997e35265d22; https://wpscan.com/vulnerability/9579ff13-9597-4a77-8cb9-997e35265d22
CVE: CVE-2021-24593
Published: 2021-08-30
Description: The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/309296d4-c397-4fc7-85fb-a28b5b5b6a8d; https://wpscan.com/vulnerability/309296d4-c397-4fc7-85fb-a28b5b5b6a8d
CVE: CVE-2021-24665
Published: 2021-08-30
Description: The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/42a8947f-2ae5-4f12-bd3d-ab3716501df5; https://www.fortiguard.com/zeroday/FG-VD-21-059; https://wpscan.com/vulnerability/42a8947f-2ae5-4f12-bd3d-ab3716501df5
CVE: CVE-2021-24667
Published: 2021-08-30
Description: A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5925b263-6d6f-4a03-a98a-620150dff8f7; https://www.fortiguard.com/zeroday/FG-VD-21-060; https://wpscan.com/vulnerability/5925b263-6d6f-4a03-a98a-620150dff8f7
CVE: CVE-2021-37911
Published: 2021-08-30
Description: The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html; https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html
CVE: CVE-2021-27909
Published: 2021-08-30
Description: For Mautic versions prior to 3.3.4/4.0.0, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince or trick the target into clicking a password reset URL with the vulnerable parameter utilized.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-32hw-3pvh-vcvc; https://github.com/mautic/mautic/security/advisories/GHSA-32hw-3pvh-vcvc
CVE: CVE-2021-27910
Published: 2021-08-30
Description: Insufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function. The values submitted in the "error" and "error_related_to" parameters of the POST request of the bounce management callback will be permanently stored and executed once the details page of an affected lead is opened by a Mautic user. An attacker with access to the bounce management callback function (identified with the Mailjet webhook, but it is assumed this will work uniformly across all kinds of webhooks) can inject arbitrary JavaScript Code into the "error" and "error_related_to" parameters of the POST request (POST /mailer/<product / webhook>/callback). It is noted that there is no authentication needed to access this function. The JavaScript Code is stored permanently in the web application and executed every time an authenticated user views the details page of a single contact / lead in Mautic. This means, arbitrary code can be executed to, e.g., steal or tamper with information.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-86pv-95mj-7w5f; https://github.com/mautic/mautic/security/advisories/GHSA-86pv-95mj-7w5f
CVE: CVE-2021-27911
Published: 2021-08-30
Description: Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from different sources such as UI, API, 3rd party syncing, forms, etc.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc; https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc
CVE: CVE-2021-27912
Published: 2021-08-30
Description: Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8; https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8
CVE: CVE-2021-27913
Published: 2021-08-30
Description: The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-327, CWE-338
References: https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3; https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3
CVE: CVE-2021-29722
Published: 2021-08-30
Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201095; https://www.ibm.com/support/pages/node/6484681; https://www.ibm.com/support/pages/node/6484685
CVE: CVE-2021-29723
Published: 2021-08-30
Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201100; https://www.ibm.com/support/pages/node/6484681; https://www.ibm.com/support/pages/node/6484685
CVE: CVE-2021-29728
Published: 2021-08-30
Description: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201160; https://www.ibm.com/support/pages/node/6484681; https://www.ibm.com/support/pages/node/6484685
CVE: CVE-2021-29743
Published: 2021-08-30
Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 201693.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201693; https://www.ibm.com/support/pages/node/6484679; https://exchange.xforce.ibmcloud.com/vulnerabilities/201693
CVE: CVE-2020-18121
Published: 2021-08-30
Description: A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/Indexhibit/indexhibit/issues/17; https://github.com/Indexhibit/indexhibit/issues/17
CVE: CVE-2020-18123
Published: 2021-08-30
Description: A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Indexhibit/indexhibit/issues/18; https://github.com/Indexhibit/indexhibit/issues/18
CVE: CVE-2020-18124
Published: 2021-08-30
Description: A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-352
References: https://github.com/Indexhibit/indexhibit/issues/19; https://github.com/Indexhibit/indexhibit/issues/19
CVE: CVE-2020-18125
Published: 2021-08-30
Description: A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Indexhibit/indexhibit/issues/20; https://github.com/Indexhibit/indexhibit/issues/20
CVE: CVE-2020-18126
Published: 2021-08-30
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Indexhibit/indexhibit/issues/21; https://github.com/Indexhibit/indexhibit/issues/21
CVE: CVE-2020-18127
Published: 2021-08-30
Description: An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://cwe.mitre.org/data/definitions/23.html; https://github.com/Indexhibit/indexhibit/issues/22; https://cwe.mitre.org/data/definitions/23.html
CVE: CVE-2020-35633
Published: 2021-08-30
Description: A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() store_sm_boundary_item() Edge_of.A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35634
Published: 2021-08-30
Description: A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Sloop_of. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35635
Published: 2021-08-30
Description: A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2021-21741
Published: 2021-08-30
Description: There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1018424; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1018424
CVE: CVE-2021-21774
Published: 2021-08-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21773. Reason: This candidate is a reservation duplicate of CVE-2021-21773. Notes: All CVE users should reference CVE-2021-21773 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-22022
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-22023
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.
CVSS Score: 7.2 (HIGH)
CWE: CWE-639
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-22024
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-22025
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-22026
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-22027
Published: 2021-08-30
Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://www.vmware.com/security/advisories/VMSA-2021-0018.html; https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE: CVE-2021-27018
Published: 2021-08-30
Description: The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://puppet.com/security/cve/CVE-2021-27018; https://puppet.com/security/cve/CVE-2021-27018
CVE: CVE-2021-27019
Published: 2021-08-30
Description: PuppetDB logging included potentially sensitive system information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://puppet.com/security/cve/CVE-2021-27019; https://puppet.com/security/cve/CVE-2021-27019
CVE: CVE-2021-27020
Published: 2021-08-30
Description: Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://puppet.com/security/cve/CVE-2021-27020; https://puppet.com/security/cve/CVE-2021-27020
CVE: CVE-2021-27663
Published: 2021-08-30
Description: A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
CVSS Score: 8.2 (HIGH)
CWE: CWE-285
References: https://us-cert.gov/ics/advisories/ICSA-21-238-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://us-cert.gov/ics/advisories/ICSA-21-238-01
CVE: CVE-2021-29631
Published: 2021-08-30
Description: In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE before p10, and 11.4-RELEASE before p13, certain VirtIO-based device models in bhyve failed to handle errors when fetching I/O descriptors. A malicious guest may cause the device model to operate on uninitialized I/O vectors leading to memory corruption, crashing of the bhyve process, and possibly arbitrary code execution in the bhyve process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-908
References: https://security.FreeBSD.org/advisories/FreeBSD-SA-21:13.bhyve.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.FreeBSD.org/advisories/FreeBSD-SA-21:13.bhyve.asc
CVE: CVE-2021-32955
Published: 2021-08-30
Description: Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE: CVE-2021-32967
Published: 2021-08-30
Description: Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-287
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE: CVE-2021-32983
Published: 2021-08-30
Description: A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE: CVE-2021-32991
Published: 2021-08-30
Description: Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE: CVE-2021-33003
Published: 2021-08-30
Description: Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-916, CWE-327
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
CVE: CVE-2021-33007
Published: 2021-08-30
Description: A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-236-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-236-03
CVE: CVE-2021-33019
Published: 2021-08-30
Description: A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-238-04; https://www.zerodayinitiative.com/advisories/ZDI-21-1059/; https://us-cert.cisa.gov/ics/advisories/icsa-21-238-04