deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1328
Published: 2024-03-12
Description: The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 4.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862, CWE-79
References: https://plugins.trac.wordpress.org/browser/newsletter2go/tags/4.0.13/gui/N2Go_Gui.php#L296; https://www.wordfence.com/threat-intel/vulnerabilities/id/766ac399-7280-4186-8972-94da813da85e?source=cve; https://plugins.trac.wordpress.org/browser/newsletter2go/tags/4.0.13/gui/N2Go_Gui.php#L296
CVE: CVE-2024-25994
Published: 2024-03-12
Description: An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-25995
Published: 2024-03-12
Description: An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://www.zerodayinitiative.com/advisories/ZDI-24-856/; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-25996
Published: 2024-03-12
Description: An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-346
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-25997
Published: 2024-03-12
Description: An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-25998
Published: 2024-03-12
Description: An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77, CWE-77
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-25999
Published: 2024-03-12
Description: An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service. 
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26000
Published: 2024-03-12
Description: An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26001
Published: 2024-03-12
Description: An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
CVSS Score: 7.4 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26002
Published: 2024-03-12
Description: An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26003
Published: 2024-03-12
Description: An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26004
Published: 2024-03-12
Description: An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26005
Published: 2024-03-12
Description: An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS. 
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-459
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-26288
Published: 2024-03-12
Description: An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.
CVSS Score: 8.7 (HIGH)
CWE: CWE-319
References: https://cert.vde.com/en/advisories/VDE-2024-011; https://cert.vde.com/en/advisories/VDE-2024-011
CVE: CVE-2024-27279
Published: 2024-03-12
Description: Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with editor or higher privilege who can login to the product may obtain arbitrary files on the server including password files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://developer.a-blogcms.jp/blog/news/JVN-48443978.html; https://jvn.jp/en/jp/JVN48443978/; https://developer.a-blogcms.jp/blog/news/JVN-48443978.html
CVE: CVE-2024-2371
Published: 2024-03-12
Description: Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/information-exposure-vulnerability-korenix-jetio-6550; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/information-exposure-vulnerability-korenix-jetio-6550
CVE: CVE-2023-4626
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hook() function in versions up to, and including, 4.3. This makes it possible for authenticated attackers with subscriber-level access and above to update the 'ladiflow_hook_configs' option.
CVSS Score: 4.3 (MEDIUM)
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1983; https://www.wordfence.com/threat-intel/vulnerabilities/id/47dccf26-6c8d-4418-a874-c29749bee537?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1983
CVE: CVE-2023-4627
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to update the 'ladipage_config' option.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1971; https://www.wordfence.com/threat-intel/vulnerabilities/id/d8074af6-cb2c-44db-9110-517f33caa96e?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1971
CVE: CVE-2023-4628
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() function in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to update the 'ladiflow_hook_configs' option via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1983; https://www.wordfence.com/threat-intel/vulnerabilities/id/0be418fa-f1cf-4aaf-bc94-c8e04186a54b?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1983
CVE: CVE-2023-4629
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to update the 'ladipage_config' option via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1971; https://www.wordfence.com/threat-intel/vulnerabilities/id/ea595e78-f4fc-491d-8143-c836302618d5?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1971
CVE: CVE-2023-4728
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to change the LadiPage key (a key fully controlled by the attacker), enabling them to freely create new pages, including web pages that trigger stored XSS
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-79
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1992; https://www.wordfence.com/threat-intel/vulnerabilities/id/6dafc81c-f1be-422d-b34f-87f1956e8849?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1992
CVE: CVE-2023-4729
Published: 2024-03-12
Description: The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to change the LadiPage key (a key fully controlled by the attacker), enabling them to freely create new pages, including web pages that trigger stored XSS via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1992; https://www.wordfence.com/threat-intel/vulnerabilities/id/db707507-c53f-45b8-a8e1-7fea1c6f8f3c?source=cve; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1992
CVE: CVE-2023-4731
Published: 2024-03-12
Description: The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to modify a variety of settings, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. An attacker can directly modify the 'ladipage_key' which enables them to create new posts on the website and inject malicious web scripts,
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L153; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L175; https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L187
CVE: CVE-2022-32257
Published: 2024-03-12
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/html/ssa-576771.html; https://cert-portal.siemens.com/productcert/html/ssa-576771.html
CVE: CVE-2023-41313
Published: 2024-03-12
Description: The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks.
Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-208
References: http://www.openwall.com/lists/oss-security/2024/03/10/2; https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95; http://www.openwall.com/lists/oss-security/2024/03/10/2
CVE: CVE-2023-45793
Published: 2024-03-12
Description: A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/html/ssa-145196.html; https://cert-portal.siemens.com/productcert/html/ssa-145196.html
CVE: CVE-2024-21483
Published: 2024-03-12
Description: A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3120 DC (7KM3120-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 AC/DC (7KM3220-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)), SENTRON 7KM PAC3220 DC (7KM3220-1BA01-1EA0) (All versions >= V3.2.3 < V3.2.4 only when manufactured between LQN231003... and LQN231215... ( with LQNYYMMDD...)). The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process.

An attacker with physical access to the device could read out the data.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/html/ssa-792319.html; https://cert-portal.siemens.com/productcert/html/ssa-792319.html
CVE: CVE-2024-22039
Published: 2024-03-12
Description: A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow.
This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-120
References: https://cert-portal.siemens.com/productcert/html/ssa-225840.html; https://cert-portal.siemens.com/productcert/html/ssa-953710.html; https://cert-portal.siemens.com/productcert/html/ssa-225840.html
CVE: CVE-2024-22040
Published: 2024-03-12
Description: A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems insufficiently validates HMAC values which might result in a buffer overread.
This could allow an unauthenticated remote attacker to crash the network service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-225840.html; https://cert-portal.siemens.com/productcert/html/ssa-953710.html; https://cert-portal.siemens.com/productcert/html/ssa-225840.html
CVE: CVE-2024-22041
Published: 2024-03-12
Description: A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems improperly handles memory buffers when parsing X.509 certificates.
This could allow an unauthenticated remote attacker to crash the network service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://cert-portal.siemens.com/productcert/html/ssa-225840.html; https://cert-portal.siemens.com/productcert/html/ssa-953710.html; https://cert-portal.siemens.com/productcert/html/ssa-225840.html
CVE: CVE-2024-22044
Published: 2024-03-12
Description: A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-912
References: https://cert-portal.siemens.com/productcert/html/ssa-918992.html; https://cert-portal.siemens.com/productcert/html/ssa-918992.html
CVE: CVE-2024-22045
Published: 2024-03-12
Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also available via the web interface of the product.
CVSS Score: 7.6 (HIGH)
CWE: CWE-538
References: https://cert-portal.siemens.com/productcert/html/ssa-653855.html; https://cert-portal.siemens.com/productcert/html/ssa-653855.html
CVE: CVE-2024-27907
Published: 2024-03-12
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-22051)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/html/ssa-000072.html; https://cert-portal.siemens.com/productcert/html/ssa-000072.html
CVE: CVE-2024-2391
Published: 2024-03-12
Description: A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-256442 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.256442; https://vuldb.com/?id.256442; https://www.exploit-db.com/exploits/51153
CVE: CVE-2024-28535
Published: 2024-03-12
Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_mitInterface.md; https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_mitInterface.md
CVE: CVE-2024-28553
Published: 2024-03-12
Description: Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_entrys.md; https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromAddressNat_entrys.md