deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-0048
Published: 2019-07-11
Description: On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall filter is applied on the loopback interface, other firewall filters might stop working for multicast traffic. The command 'show firewall filter' can be used to confirm whether the filter is working. This issue only affects the EX4300 switch. No other products or platforms are affected by this vulnerability. This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D51, 14.1X53-D115 on EX4300 Series; 17.1 versions prior to 17.1R3 on EX4300 Series; 17.2 versions prior to 17.2R3-S2 on EX4300 Series; 17.3 versions prior to 17.3R3-S3 on EX4300 Series; 17.4 versions prior to 17.4R2-S5, 17.4R3 on EX4300 Series; 18.1 versions prior to 18.1R3-S1 on EX4300 Series; 18.2 versions prior to 18.2R2 on EX4300 Series; 18.3 versions prior to 18.3R2 on EX4300 Series.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: https://kb.juniper.net/JSA10942; https://kb.juniper.net/JSA10942
CVE: CVE-2019-0049
Published: 2019-07-11
Description: On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. Repeated crashes of the RPD process can cause prolonged Denial of Service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S3; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.2X75 versions prior to 17.2X75-D105; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S7, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D30; 18.3 versions prior to 18.3R1-S4, 18.3R2. Junos OS releases prior to 16.1R1 are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://kb.juniper.net/JSA10943; https://kb.juniper.net/JSA10943
CVE: CVE-2019-0052
Published: 2019-07-11
Description: The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404, CWE-436
References: http://www.securityfocus.com/bid/109145; https://kb.juniper.net/JSA10946; http://www.securityfocus.com/bid/109145
CVE: CVE-2019-0053
Published: 2019-07-11
Description: Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://packetstormsecurity.com/files/153746/FreeBSD-Security-Advisory-FreeBSD-SA-19-12.telnet.html; https://kb.juniper.net/JSA10947; https://lists.debian.org/debian-lts-announce/2022/11/msg00033.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/go-gitea/gitea/releases; https://github.com/go-gitea/gitea/releases
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc; https://github.com/dbry/WavPack/issues/65; https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://github.com/leonnnn/pyxtrlock/issues/21; https://github.com/leonnnn/pyxtrlock/issues/21
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-457, CWE-908
References: https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b; https://github.com/dbry/WavPack/issues/66; https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-11
Description: WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-457, CWE-908
References: https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe; https://github.com/dbry/WavPack/issues/68; https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
CVE: CVE-2019-10970
Published: 2019-07-11
Description: In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device’s file system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/109105; https://www.us-cert.gov/ics/advisories/icsa-19-190-02; http://www.securityfocus.com/bid/109105
CVE: CVE-2019-12571
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v0.9.8 beta (build 02099) for macOS could allow an authenticated, local attacker to overwrite arbitrary files. When the client initiates a connection, the XML /tmp/pia-watcher.plist file is created. If the file exists, it will be truncated and the contents completely overwritten. This file is removed on disconnect. An unprivileged user can create a hard or soft link to arbitrary files owned by any user on the system, including root. This creates a denial of service condition and possible data loss if leveraged by a malicious local user.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12571.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12571.txt
CVE: CVE-2019-12573
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpn_launcher binary is setuid root. This binary supports the --log option, which accepts a path as an argument. This parameter is not sanitized, which allows a local unprivileged user to overwrite arbitrary files owned by any user on the system, including root. This creates a denial of service condition and possible data loss if leveraged by a malicious local user.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12573.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12573.txt
CVE: CVE-2019-12574
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The updater loads several libraries from a folder that authenticated users have write access to. A low privileged user can leverage this vulnerability to execute arbitrary code as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12574.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12574.txt
CVE: CVE-2019-12575
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The root_runner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts to load several libraries under /tmp/ruby-deploy.old/lib. A local unprivileged user can create a malicious library under this path to execute arbitrary code as the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12575.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12575.txt
CVE: CVE-2019-12576
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn_launcher binary is setuid root. This program is called during the connection process and executes several operating system utilities to configure the system. The networksetup utility is called using relative paths. A local unprivileged user can execute arbitrary commands as root by creating a networksetup trojan which will be executed during the connection process. This is possible because the PATH environment variable is not reset prior to executing the OS utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12576.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12576.txt
CVE: CVE-2019-12577
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The macOS binary openvpn_launcher.64 is setuid root. This binary creates /tmp/pia_upscript.sh when executed. Because the file creation mask (umask) is not reset, the umask value is inherited from the calling process. This value can be manipulated to cause the privileged binary to create files with world writable permissions. A local unprivileged user can modify /tmp/pia_upscript.sh during the connect process to execute arbitrary code as the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12577.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12577.txt
CVE: CVE-2019-12578
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn_launcher.64 binary is setuid root. This binary executes /opt/pia/openvpn-64/openvpn, passing the parameters provided from the command line. Care was taken to programmatically disable potentially dangerous openvpn parameters; however, the --route-pre-down parameter can be used. This parameter accepts an arbitrary path to a script/program to be executed when OpenVPN exits. The --script-security parameter also needs to be passed to allow for this action to be taken, and --script-security is not currently in the disabled parameter list. A local unprivileged user can pass a malicious script/binary to the --route-pre-down option, which will be executed as root when openvpn is stopped.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12578.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12578.txt
CVE: CVE-2019-12579
Published: 2019-07-11
Description: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpn_launcher.64 binary is setuid root. This binary accepts several parameters to update the system configuration. These parameters are passed to operating system commands using a "here" document. The parameters are not sanitized, which allow for arbitrary commands to be injected using shell metacharacters. A local unprivileged user can pass special crafted parameters that will be interpolated by the operating system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12579.txt; https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12579.txt
CVE: CVE-2019-4118
Published: 2019-07-11
Description: IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment. IBM X-Force ID: 158144.
CVSS Score: 4.4 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=ibm10885290; http://www.securityfocus.com/bid/109147; https://exchange.xforce.ibmcloud.com/vulnerabilities/158144
CVE: CVE-2019-4131
Published: 2019-07-11
Description: IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158270; https://www.ibm.com/support/docview.wss?uid=ibm10957121; https://exchange.xforce.ibmcloud.com/vulnerabilities/158270
CVE: CVE-2019-4193
Published: 2019-07-11
Description: IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10885985; http://www.securityfocus.com/bid/109144; https://exchange.xforce.ibmcloud.com/vulnerabilities/159032
CVE: CVE-2019-4263
Published: 2019-07-11
Description: IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-829
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160015; https://www.ibm.com/support/docview.wss?uid=ibm10882412; https://exchange.xforce.ibmcloud.com/vulnerabilities/160015
CVE: CVE-2018-17196
Published: 2019-07-11
Description: In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to 2.1.1 or later where this vulnerability has been fixed.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/109139; https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E; https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
CVE: CVE-2018-18095
Published: 2019-07-11
Description: Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/109103; https://support.f5.com/csp/article/K62655863; https://support.f5.com/csp/article/K62655863?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-11133
Published: 2019-07-11
Description: Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/109096; https://support.f5.com/csp/article/K90305959; https://support.f5.com/csp/article/K90305959?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-12751
Published: 2019-07-11
Description: Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/108925; https://support.symantec.com/us/en/article.SYMSA1486.html; http://www.securityfocus.com/bid/108925
CVE: CVE-2019-3415
Published: 2019-07-11
Description: ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-22
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011082; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011082
CVE: CVE-2019-5528
Published: 2019-07-11
Description: VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi[PII_REDACTED]01-UG for this issue is available.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/109130; https://www.vmware.com/security/advisories/VMSA-2019-0011.html; http://www.securityfocus.com/bid/109130
CVE: CVE-2019-10915
Published: 2019-07-11
Description: A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306, CWE-306
References: http://www.securityfocus.com/bid/109124; https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf
CVE: CVE-2019-10930
Published: 2019-07-11
Description: A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-434
References: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf
CVE: CVE-2019-10931
Published: 2019-07-11
Description: A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf