deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31697
Published: 2022-12-13
Description: The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.vmware.com/security/advisories/VMSA-2022-0030.html; https://www.vmware.com/security/advisories/VMSA-2022-0030.html
CVE: CVE-2022-31698
Published: 2022-12-13
Description: The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588; https://www.vmware.com/security/advisories/VMSA-2022-0030.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
CVE: CVE-2022-31699
Published: 2022-12-13
Description: VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-787, CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2022-0030.html; https://www.vmware.com/security/advisories/VMSA-2022-0030.html
CVE: CVE-2022-33235
Published: 2022-12-13
Description: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 8.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
CVE: CVE-2022-33238
Published: 2022-12-13
Description: Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
CVE: CVE-2022-33268
Published: 2022-12-13
Description: Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
CVE: CVE-2022-3996
Published: 2022-12-13
Description: If an X.509 certificate contains a malformed policy constraint and
policy processing is enabled, then a write lock will be taken twice
recursively.  On some operating systems (most widely: Windows) this
results in a denial of service when the affected process hangs.  Policy
processing being enabled on a publicly facing server is not considered
to be a common setup.

Policy processing is enabled by passing the `-policy'
argument to the command line utilities or by calling the
`X509_VERIFY_PARAM_set1_policies()' function.

Update (31 March 2023): The description of the policy processing enablement
was corrected based on CVE-2023-0466.
CVSS Score: 7.5 (HIGH)
CWE: CWE-667, CWE-667
References: https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7; https://www.openssl.org/news/secadv/20221213.txt; https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7
CVE: CVE-2022-41278
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41279
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41280
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41281
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41282
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41283
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds write vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41284
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41285
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41286
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains an out of bounds write vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41287
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains divide by zero vulnerability when parsing a CGM file. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-369, CWE-369
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-41288
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CGM_NIST_Loader.dll contains stack exhaustion vulnerability when parsing a CGM file. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-770, CWE-770
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-43517
Published: 2022-12-13
Description: A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders.

This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf
CVE: CVE-2022-43722
Published: 2022-12-13
Description: A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf
CVE: CVE-2022-43723
Published: 2022-12-13
Description: A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1287, CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf
CVE: CVE-2022-43724
Published: 2022-12-13
Description: A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xp_cmdshell feature unauthenticated remote attackers could execute custom OS commands. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319, CWE-319, CWE-319
References: https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf
CVE: CVE-2022-44575
Published: 2022-12-13
Description: A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf
CVE: CVE-2022-44731
Published: 2022-12-13
Description: A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances.

This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf
CVE: CVE-2022-45484
Published: 2022-12-13
Description: A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.9), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.5), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization V14.1 (All versions < V14.1.0.6). The CCITT_G4Decode.dll contains an out of bounds read vulnerability when parsing a RAS file. An attacker can leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19056)
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf
CVE: CVE-2022-45936
Published: 2022-12-13
Description: A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf
CVE: CVE-2022-45937
Published: 2022-12-13
Description: A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf
CVE: CVE-2022-46051
Published: 2022-12-13
Description: The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD; https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD
CVE: CVE-2022-46140
Published: 2022-12-13
Description: Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://cert-portal.siemens.com/productcert/html/ssa-413565.html; https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
CVE: CVE-2022-46142
Published: 2022-12-13
Description: Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-257, CWE-522
References: https://cert-portal.siemens.com/productcert/html/ssa-413565.html; https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
CVE: CVE-2022-46143
Published: 2022-12-13
Description: Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
CVSS Score: 2.7 (LOW)
CWE: CWE-1284, CWE-1284
References: https://cert-portal.siemens.com/productcert/html/ssa-180704.html; https://cert-portal.siemens.com/productcert/html/ssa-413565.html; https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
CVE: CVE-2022-46144
Published: 2022-12-13
Description: A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial  interface irresponsive.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-664
References: https://cert-portal.siemens.com/productcert/html/ssa-413565.html; https://cert-portal.siemens.com/productcert/html/ssa-690517.html; https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
CVE: CVE-2022-46265
Published: 2022-12-13
Description: A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host header injection vulnerability that could allow an attacker to spoof a Host header information and redirect users to malicious websites.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf
CVE: CVE-2022-46345
Published: 2022-12-13
Description: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19070)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf