deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-26717
Published: 2021-02-18
Description: An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remote response was delayed just enough, Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream, then Asterisk would crash.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/161471/Asterisk-Project-Security-Advisory-AST-2021-002.html; http://seclists.org/fulldisclosure/2021/Feb/58; https://downloads.asterisk.org/pub/security/
CVE: CVE-2021-26906
Published: 2021-02-18
Description: An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-404
References: http://packetstormsecurity.com/files/161477/Asterisk-Project-Security-Advisory-AST-2021-005.html; http://seclists.org/fulldisclosure/2021/Feb/61; https://downloads.asterisk.org/pub/security/
CVE: CVE-2021-26712
Published: 2021-02-18
Description: Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/161473/Asterisk-Project-Security-Advisory-AST-2021-003.html; http://seclists.org/fulldisclosure/2021/Feb/59; https://downloads.asterisk.org/pub/security/
CVE: CVE-2021-26747
Published: 2021-02-18
Description: Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.netis-systems.com.tw/; https://github.com/yhstar00/netis-route; http://www.netis-systems.com.tw/
CVE: CVE-2020-19513
Published: 2021-02-19
Description: Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.exploit-db.com/exploits/46991; https://www.exploit-db.com/exploits/46991
CVE: CVE-2019-25024
Published: 2021-02-19
Description: OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2019-25024.md; https://github.com/OpenRepeater/openrepeater/issues/66; https://github.com/codexlynx/CVE-2019-25024
CVE: CVE-2021-27403
Published: 2021-02-19
Description: Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bokanrb/XSS-Askey; https://github.com/bokanrb/XSS-Askey
CVE: CVE-2021-27404
Published: 2021-02-19
Description: Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/bokanrb/HostHeaderInjection-Askey; https://github.com/bokanrb/HostHeaderInjection-Askey
CVE: CVE-2020-36246
Published: 2021-02-19
Description: Amaze File Manager before 3.5.1 allows attackers to obtain root privileges via shell metacharacters in a symbolic link.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://compass-security.com/fileadmin/Research/Advisories/2020-18_CSNC-2020-030_Amaze_FileManager_Privilege_Escalation.txt; https://github.com/TeamAmaze/AmazeFileManager/releases/tag/v3.5.1; https://compass-security.com/fileadmin/Research/Advisories/2020-18_CSNC-2020-030_Amaze_FileManager_Privilege_Escalation.txt
CVE: CVE-2021-26746
Published: 2021-02-19
Description: Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec; https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-45-2021-01-21-Moderate-impact-moderate-risk-XSS-vulnerability-in-agenda; https://www.netsparker.com/web-applications-advisories/ns-21-001-cross-site-scripting-in-chamilo-lms/
CVE: CVE-2021-27405
Published: 2021-02-19
Description: A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/progfay/scrapbox-parser/pull/519; https://github.com/progfay/scrapbox-parser/pull/539; https://github.com/progfay/scrapbox-parser/pull/540
CVE: CVE-2020-24908
Published: 2021-02-19
Description: Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.
CVSS Score: 7.8 (HIGH)
References: https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt; https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt
CVE: CVE-2020-36247
Published: 2021-02-19
Description: Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://listsprd.osu.edu/pipermail/ood-users/2020-April/000397.html; https://listsprd.osu.edu/pipermail/ood-users/2020-April/000397.html
CVE: CVE-2020-10252
Published: 2021-02-19
Description: An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.
CVSS Score: 8.3 (HIGH)
CWE: CWE-918
References: https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44; https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/; https://owncloud.org/changelog/server/
CVE: CVE-2020-10254
Published: 2021-02-19
Description: An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44; https://owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/; https://owncloud.org/changelog/server/
CVE: CVE-2020-36249
Published: 2021-02-19
Description: The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.
CVSS Score: 7.5 (HIGH)
References: https://owncloud.com/security-advisories/bypassing-file-firewall-oc-sa-2020-002/; https://owncloud.com/security-advisories/bypassing-file-firewall-oc-sa-2020-002/
CVE: CVE-2020-36250
Published: 2021-02-19
Description: In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past.
CVSS Score: 6.1 (MEDIUM)
References: https://owncloud.com/security-advisories/security-lock-can-be-bypassed-by-changing-the-system-date/; https://owncloud.com/security-advisories/security-lock-can-be-bypassed-by-changing-the-system-date/
CVE: CVE-2020-36251
Published: 2021-02-19
Description: ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share.
CVSS Score: 3.5 (LOW)
References: https://owncloud.com/security-advisories/deleting-received-group-share-for-whole-group/; https://owncloud.com/security-advisories/deleting-received-group-share-for-whole-group/
CVE: CVE-2020-36252
Published: 2021-02-19
Description: ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-330
References: https://owncloud.com/security-advisories/access-to-all-file-versions/; https://owncloud.com/security-advisories/access-to-all-file-versions/
CVE: CVE-2020-36248
Published: 2021-02-19
Description: The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive.
CVSS Score: 3.9 (LOW)
CWE: CWE-312
References: https://owncloud.com/security-advisories/bypassing-app-lock-pattern-passcode-fingerprint-lock-android-oc-sa-2020-003/; https://owncloud.com/security-advisories/bypassing-app-lock-pattern-passcode-fingerprint-lock-android-oc-sa-2020-003/
CVE: CVE-2021-3339
Published: 2021-02-19
Description: ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://4sightwebsite.azurewebsites.net/mf_releaseNotes; https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview; https://4sightwebsite.azurewebsites.net/mf_releaseNotes
CVE: CVE-2021-26296
Published: 2021-02-19
Description: In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is possible (although difficult) for an attacker to calculate a future CSRF token value and to use that value to trick a user into executing unwanted actions on an application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-352
References: http://packetstormsecurity.com/files/161484/Apache-MyFaces-2.x-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2021/Feb/66; https://lists.apache.org/thread.html/r2b73e2356c6155e9ec78fdd8f72a4fac12f3e588014f5f535106ed9b%40%3Cannounce.apache.org%3E
CVE: CVE-2021-3204
Published: 2021-02-19
Description: SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://www.l0l.xyz/sec/2021/01/05/1-webdesktop-root-ssrf.html; https://www.l0l.xyz/sec/2021/01/05/1-webdesktop-root-ssrf.html
CVE: CVE-2021-3210
Published: 2021-02-19
Description: components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpModal.jsx#L57; https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpTexts/GenericAll/GenericAll.jsx#L31-L37; https://github.com/BloodHoundAD/BloodHound/issues/338
CVE: CVE-2020-12374
Published: 2021-02-19
Description: Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html
CVE: CVE-2021-22701
Published: 2021-02-19
Description: A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352
References: https://www.se.com/ww/en/download/document/SEVD-2021-040-01/; https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE: CVE-2021-22702
Published: 2021-02-19
Description: A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.se.com/ww/en/download/document/SEVD-2021-040-01/; https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE: CVE-2021-22703
Published: 2021-02-19
Description: A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.se.com/ww/en/download/document/SEVD-2021-040-01/; https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE: CVE-2020-13549
Published: 2021-02-19
Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or replace other files within the installation folder, which would allow for local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1167; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1167
CVE: CVE-2021-21512
Published: 2021-02-19
Description: Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account.
CVSS Score: 7.9 (HIGH)
CWE: CWE-200, CWE-200
References: https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure; https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure
CVE: CVE-2021-23342
Published: 2021-02-19
Description: This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more “////” characters
CVSS Score: 8.6 (HIGH)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Feb/71; https://github.com/docsifyjs/docsify/commit/ff2a66f[PII_REDACTED]fe81a64ad6c4b2c08111fe
CVE: CVE-2020-25171
Published: 2021-02-19
Description: The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-329-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-329-02
CVE: CVE-2020-9050
Published: 2021-02-19
Description: Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.us-cert.gov/ics/advisories/icsa-21-049-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories
CVE: CVE-2021-27214
Published: 2021-02-19
Description: A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting (XSS) attack against the administrative interface via an HTTP request, a different vulnerability than CVE-2019-3905.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-918
References: https://www.horizonsecurity.it/lang_EN/advisories/?a=20&title=ManageEngine+ADSelfService+Plus+privilege+escalation++CVE202127214; https://www.manageengine.com/products/self-service-password/release-notes.html; https://www.horizonsecurity.it/lang_EN/advisories/?a=20&title=ManageEngine+ADSelfService+Plus+privilege+escalation++CVE202127214
CVE: CVE-2021-27328
Published: 2021-02-19
Description: Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html; http://yeastar.com; https://github.com/SQSamir/CVE-2021-27328
CVE: CVE-2021-27351
Published: 2021-02-19
Description: The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-613
References: https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html; https://security.gentoo.org/glsa/202105-07; https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html
CVE: CVE-2020-35499
Published: 2021-02-19
Description: A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel internal information.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1910048; https://bugzilla.redhat.com/show_bug.cgi?id=1910048
CVE: CVE-2021-20587
Published: 2021-02-19
Description: Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://jvn.jp/vu/JVNVU92330101; https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf
CVE: CVE-2021-20588
Published: 2021-02-19
Description: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130, CWE-119
References: https://jvn.jp/vu/JVNVU92330101; https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf