deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6359
Published: 2020-09-09
Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://launchpad.support.sap.com/#/notes/2960815; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700; https://www.zerodayinitiative.com/advisories/ZDI-20-1170/
CVE: CVE-2020-6360
Published: 2020-09-09
Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://launchpad.support.sap.com/#/notes/2960815; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700; https://www.zerodayinitiative.com/advisories/ZDI-20-1171/
CVE: CVE-2020-6361
Published: 2020-09-09
Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://launchpad.support.sap.com/#/notes/2960815; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700; https://www.zerodayinitiative.com/advisories/ZDI-20-1172/
CVE: CVE-2020-14384
Published: 2020-09-09
Description: A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1875176; https://bugzilla.redhat.com/show_bug.cgi?id=1875176
CVE: CVE-2020-1968
Published: 2020-09-09
Description: The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).
CVSS Score: 3.7 (LOW)
CWE: CWE-203, CWE-203
References: https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html; https://security.gentoo.org/glsa/202210-02; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-24074
Published: 2020-09-09
Description: The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-119
References: https://github.com/kn007/silk-v3-decoder/commit/d[PII_REDACTED]62db01c07cc0dfd95ff1f1eaaea02; https://github.com/kn007/silk-v3-decoder/issues/62; https://github.com/kn007/silk-v3-decoder/commit/d[PII_REDACTED]62db01c07cc0dfd95ff1f1eaaea02
CVE: CVE-2020-24194
Published: 2020-09-09
Description: A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://sourcecodetester.com; https://cxsecurity.com/issue/WLB[PII_REDACTED]; http://sourcecodetester.com
CVE: CVE-2020-24197
Published: 2020-09-09
Description: A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.sourcecodester.com/php/14366/stock-management-system-php.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2020-6311
Published: 2020-09-09
Description: Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version � 100, does not correctly perform necessary authorization checks for an authenticated user due to Improper Authorization checks, that may cause a system administrator to create incorrect authorization proposals. This may result in privilege escalation and may expose restricted banking data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://launchpad.support.sap.com/#/notes/2951325; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700; https://launchpad.support.sap.com/#/notes/2951325
CVE: CVE-2020-6324
Published: 2020-09-09
Description: SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s browser leading to Reflected Cross Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2948239; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700; https://launchpad.support.sap.com/#/notes/2948239
CVE: CVE-2020-1749
Published: 2020-09-09
Description: A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749
CVE: CVE-2020-24195
Published: 2020-09-09
Description: An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated administrator to conduct remote code execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://packetstormsecurity.com/files/158704/Online-Bike-Rental-1.0-Shell-Upload.html; https://www.sourcecodester.com/php/14374/online-bike-rental-phpmysql.html; https://packetstormsecurity.com/files/158704/Online-Bike-Rental-1.0-Shell-Upload.html
CVE: CVE-2020-24198
Published: 2020-09-09
Description: A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.sourcecodester.com/php/14366/stock-management-system-php.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2020-24199
Published: 2020-09-09
Description: Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp; https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py; https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/
CVE: CVE-2020-24200
Published: 2020-09-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-24794
Published: 2020-09-09
Description: Cross Site Scripting (XSS) vulnerability in Kentico before 12.0.75.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://devnet.kentico.com/download/hotfixes
CVE: CVE-2020-11986
Published: 2020-09-09
Description: To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis of the project at load time. This in turn will run potentially malicious code, from an external source, without the consent of the user.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.apache.org/thread.html/r0fb2ba21a0469f64c2dff945dbe68f7b1122e1bff2b2b[PII_REDACTED]6%40%3Cnotifications.netbeans.apache.org%3E; https://lists.apache.org/thread.html/ra81cdcf325bf4ea085c178f95ed6b50d4f1c095be50577b2f9b88984%40%3Cnotifications.netbeans.apache.org%3E; https://lists.apache.org/thread.html/rbb8ea1b684e73107a0a6a30245ad6112bec2e6e171368c808e69217e%40%3Cannounce.netbeans.apache.org%3E
CVE: CVE-2020-24566
Published: 2020-09-09
Description: In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment or runbook process using Azure steps and sets the step's execution location to run on the server/worker, then (under certain circumstances) the account password is exposed in cleartext in the verbose task logs output.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://github.com/OctopusDeploy/Issues/issues/6563; https://github.com/OctopusDeploy/Issues/issues/6564; https://github.com/OctopusDeploy/Issues/issues/6563
CVE: CVE-2020-25211
Published: 2020-09-09
Description: In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-120
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6; https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html; https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html
CVE: CVE-2020-25212
Published: 2020-09-09
Description: A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html
CVE: CVE-2020-25213
Published: 2020-09-09
Description: The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/160003/WordPress-File-Manager-6.8-Remote-Code-Execution.html; http://packetstormsecurity.com/files/171650/WordPress-File-Manager-6.9-Shell-Upload.html; https://github.com/w4fz5uck5/wp-file-manager-0day
CVE: CVE-2020-14292
Published: 2020-09-09
Description: In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone without authorisation, bypassing the Bluetooth address randomisation protection in the user's phone.
CVSS Score: 5.7 (MEDIUM)
References: https://covidsafe.watch/issue-register/; https://github.com/AU-COVIDSafe/mobile-android/blob/b827cf3ccef72a3d38c6fc37466a[PII_REDACTED]0f/app/src/main/java/au/gov/health/covidsafe/streetpass/Work.kt#L35-L41; https://github.com/alwentiu/CVE-2020-14292
CVE: CVE-2020-2036
Published: 2020-09-09
Description: A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://security.paloaltonetworks.com/CVE-2020-2036; https://security.paloaltonetworks.com/CVE-2020-2036
CVE: CVE-2020-2037
Published: 2020-09-09
Description: An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-2037; https://security.paloaltonetworks.com/CVE-2020-2037
CVE: CVE-2020-2038
Published: 2020-09-09
Description: An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/168008/PAN-OS-10.0-Remote-Code-Execution.html; http://packetstormsecurity.com/files/168408/Palo-Alto-Networks-Authenticated-Remote-Code-Execution.html; https://security.paloaltonetworks.com/CVE-2020-2038
CVE: CVE-2020-2039
Published: 2020-09-09
Description: An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the availability of the management web interface by repeatedly uploading files until available disk space is exhausted. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://security.paloaltonetworks.com/CVE-2020-2039; https://security.paloaltonetworks.com/CVE-2020-2039
CVE: CVE-2020-2040
Published: 2020-09-09
Description: A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to the Captive Portal or Multi-Factor Authentication interface. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://security.paloaltonetworks.com/CVE-2020-2040; https://security.paloaltonetworks.com/CVE-2020-2040
CVE: CVE-2020-2041
Published: 2020-09-09
Description: An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts all versions of PAN-OS 8.0, and PAN-OS 8.1 versions earlier than 8.1.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: https://security.paloaltonetworks.com/CVE-2020-2041; https://security.paloaltonetworks.com/CVE-2020-2041
CVE: CVE-2020-2042
Published: 2020-09-09
Description: A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue impacts only PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-120
References: https://security.paloaltonetworks.com/CVE-2020-2042; https://security.paloaltonetworks.com/CVE-2020-2042
CVE: CVE-2020-2043
Published: 2020-09-09
Description: An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple times in one log entry. The first instance of the sensitive field is masked but subsequent instances are left in clear text. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://security.paloaltonetworks.com/CVE-2020-2043; https://security.paloaltonetworks.com/CVE-2020-2043
CVE: CVE-2020-2044
Published: 2020-09-09
Description: An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command (op-command) usage but did not mask all sensitive information. The opcmdhistory.log file is removed in PAN-OS 9.1 and later PAN-OS versions. Command usage is recorded, instead, in the req_stats.log file in PAN-OS 9.1 and later PAN-OS versions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://security.paloaltonetworks.com/CVE-2020-2044; https://security.paloaltonetworks.com/CVE-2020-2044
CVE: CVE-2020-13127
Published: 2020-09-09
Description: A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.divisionzero.co/2020/05/18/cve-2020-13127/; https://manuals.loway.ch/QM_WhatsNew-chunked/ch17.html; https://blog.divisionzero.co/2020/05/18/cve-2020-13127/
CVE: CVE-2020-15163
Published: 2020-09-09
Description: Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata (i.e. by a person-in-the-middle attack) culminating in a version which has not been correctly signed to control the trust chain for future updates. This is fixed in version 0.12 and newer.
CVSS Score: 8.7 (HIGH)
CWE: CWE-863, CWE-345
References: https://github.com/theupdateframework/tuf/commit/3d342e648fbacdf43a13d7ba8886aaaf07334af7; https://github.com/theupdateframework/tuf/pull/885; https://github.com/theupdateframework/tuf/releases/tag/v0.12.0
CVE: CVE-2020-7068
Published: 2020-09-09
Description: In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugs.php.net/bug.php?id=79797; https://security.gentoo.org/glsa/202009-10; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-17765
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.8 (MEDIUM)
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-14/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17766
Published: 2020-09-09
Description: Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-732
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-15/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17767
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-10/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17768
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.8 (MEDIUM)
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-13/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17769
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-120
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-16/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17770
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-120
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17771
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-798
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-11/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17772
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.8 (MEDIUM)
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-18/; https://youtu.be/gtbS3Gr264w
CVE: CVE-2018-17773
Published: 2020-09-09
Description: Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: https://ingenico.us/smart-terminals/telium2; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-19/; https://youtu.be/gtbS3Gr264w