deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-25471
Published: 2021-10-06
Description: A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25472
Published: 2021-10-06
Description: An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25473
Published: 2021-10-06
Description: Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25474
Published: 2021-10-06
Description: Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25475
Published: 2021-10-06
Description: A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 3.9 (LOW)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25476
Published: 2021-10-06
Description: An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-1295
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25477
Published: 2021-10-06
Description: An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25478
Published: 2021-10-06
Description: A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25479
Published: 2021-10-06
Description: A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25480
Published: 2021-10-06
Description: A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-294, CWE-294
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25481
Published: 2021-10-06
Description: An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25482
Published: 2021-10-06
Description: SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264, CWE-89
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25483
Published: 2021-10-06
Description: Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25484
Published: 2021-10-06
Description: Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25485
Published: 2021-10-06
Description: Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25486
Published: 2021-10-06
Description: Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log.
CVSS Score: 2.5 (LOW)
CWE: CWE-200
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25487
Published: 2021-10-06
Description: Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
CVSS Score: 7.3 (HIGH)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25487
CVE: CVE-2021-25488
Published: 2021-10-06
Description: Lack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25489
Published: 2021-10-06
Description: Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
CVSS Score: 3.3 (LOW)
CWE: CWE-20, CWE-134
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25489
CVE: CVE-2021-25490
Published: 2021-10-06
Description: A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25491
Published: 2021-10-06
Description: A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.
CVSS Score: 2.3 (LOW)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE: CVE-2021-25492
Published: 2021-10-06
Description: Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787, CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25493
Published: 2021-10-06
Description: Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-119
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25494
Published: 2021-10-06
Description: A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-120
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25495
Published: 2021-10-06
Description: A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25496
Published: 2021-10-06
Description: A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25497
Published: 2021-10-06
Description: A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25498
Published: 2021-10-06
Description: A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-25499
Published: 2021-10-06
Description: Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10; https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE: CVE-2021-29908
Published: 2021-10-06
Description: The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM X-Force ID: 207747.
CVSS Score: 9.8 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/207747; https://www.ibm.com/support/pages/node/6495469; https://exchange.xforce.ibmcloud.com/vulnerabilities/207747
CVE: CVE-2021-38923
Published: 2021-10-06
Description: IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162.
CVSS Score: 9.1 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210162; https://www.ibm.com/support/pages/node/6495879; https://exchange.xforce.ibmcloud.com/vulnerabilities/210162
CVE: CVE-2021-41121
Published: 2021-10-06
Description: Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://github.com/vyperlang/vyper/pull/2447; https://github.com/vyperlang/vyper/security/advisories/GHSA-xv8x-pr4h-73jv; https://github.com/vyperlang/vyper/pull/2447
CVE: CVE-2021-41125
Published: 2021-10-06
Description: Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. This includes requests generated by Scrapy components, such as `robots.txt` requests sent by Scrapy when the `ROBOTSTXT_OBEY` setting is set to `True`, or as requests reached through redirects. Upgrade to Scrapy 2.5.1 and use the new `http_auth_domain` spider attribute to control which domains are allowed to receive the configured HTTP authentication credentials. If you are using Scrapy 1.8 or a lower version, and upgrading to Scrapy 2.5.1 is not an option, you may upgrade to Scrapy 1.8.1 instead. If you cannot upgrade, set your HTTP authentication credentials on a per-request basis, using for example the `w3lib.http.basic_auth_header` function to convert your credentials into a value that you can assign to the `Authorization` header of your request, instead of defining your credentials globally using `HttpAuthMiddleware`.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200, CWE-522
References: http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth; https://github.com/scrapy/scrapy/commit/b01d69a1bf48060daec8f[PII_REDACTED]52d8b85a6; https://github.com/scrapy/scrapy/security/advisories/GHSA-jwqp-28gf-p498
CVE: CVE-2021-41126
Published: 2021-10-06
Description: October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October CMS v2.0. The issue has been patched in v2.1.12 of the october/october package. There are no workarounds for this issue and all users should update.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://github.com/octobercms/october/security/advisories/GHSA-6gjf-7w99-j7x7; https://octobercms.com/changelog; https://github.com/octobercms/october/security/advisories/GHSA-6gjf-7w99-j7x7
CVE: CVE-2021-41128
Published: 2021-10-06
Description: Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases. In affected versions all CSV Exports (Statistics & BAG MED) contain a CSV Injection Vulnerability. Users of the system are able to submit formula as exported fields which then get executed upon ingestion of the exported file. There is no validation or sanitization of these formula fields and so malicious may construct malicious code. This vulnerability has been resolved in version 1.30.4. There are no workarounds and all users are advised to upgrade their package.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://github.com/beatrichartz/csv/issues/103; https://github.com/beatrichartz/csv/pull/104; https://github.com/jshmrtn/hygeia/commit/d917f27432fe84e1c9751222ae55bae36a4dce60
CVE: CVE-2021-1534
Published: 2021-10-06
Description: A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-sGcfsDrp; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-sGcfsDrp
CVE: CVE-2021-1594
Published: 2021-10-06
Description: A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting and modifying specific internode communications from one ISE persona to another ISE persona. A successful exploit could allow the attacker to run arbitrary commands with root privileges on the underlying operating system. To exploit this vulnerability, the attacker would need to decrypt HTTPS traffic between two ISE personas that are located on separate nodes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-266, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-priv-esc-UwqPrBM3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-priv-esc-UwqPrBM3
CVE: CVE-2021-34698
Published: 2021-10-06
Description: A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management in the proxy service of an affected device. An attacker could exploit this vulnerability by establishing a large number of HTTPS connections to the affected device. A successful exploit could allow the attacker to cause the system to stop processing new connections, which could result in a DoS condition. Note: Manual intervention may be required to recover from this situation.
CVSS Score: 8.6 (HIGH)
CWE: CWE-401, CWE-401
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-dos-fmHdKswk; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-dos-fmHdKswk
CVE: CVE-2021-34702
Published: 2021-10-06
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator privilege levels for low-value sensitive data. An attacker with read-only administrator access to the web-based management interface could exploit this vulnerability by browsing to the page that contains the sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-disc-pNXtLhdp; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-disc-pNXtLhdp
CVE: CVE-2021-34706
Published: 2021-10-06
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information or conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by uploading a crafted XML file that contains references to external entities. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information, or cause the web application to perform arbitrary HTTP requests on behalf of the attacker.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-V4VSjEsX; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-V4VSjEsX
CVE: CVE-2021-34710
Published: 2021-10-06
Description: Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-770, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-A4J57F3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-A4J57F3
CVE: CVE-2021-34711
Published: 2021-10-06
Description: A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug shell command. A successful exploit could allow the attacker to read any file on the device file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-36, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-arbfileread-NPdtE2Ow; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-arbfileread-NPdtE2Ow
CVE: CVE-2021-34735
Published: 2021-10-06
Description: Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-770
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-A4J57F3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-A4J57F3