deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-5146
Published: 2017-08-24
Description: ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.ntp.org/show_bug.cgi?id=2853; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html
CVE: CVE-2015-5293
Published: 2017-08-24
Description: Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://access.redhat.com/security/cve/CVE-2015-5293; https://bugzilla.redhat.com/show_bug.cgi?id=1267714; https://access.redhat.com/security/cve/CVE-2015-5293
CVE: CVE-2015-7257
Published: 2017-08-24
Description: ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html; http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html; http://seclists.org/fulldisclosure/2015/Nov/48
CVE: CVE-2015-7258
Published: 2017-08-24
Description: ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html; http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html; http://seclists.org/fulldisclosure/2015/Nov/48
CVE: CVE-2015-7259
Published: 2017-08-24
Description: ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html; http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html; http://seclists.org/fulldisclosure/2015/Nov/48
CVE: CVE-2015-7516
Published: 2017-08-24
Description: ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2015/11/26/1; http://www.securityfocus.com/bid/77752; https://gerrit.onosproject.org/#/c/6137/
CVE: CVE-2015-7896
Published: 2017-08-24
Description: LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html; http://www.securityfocus.com/bid/77425; https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1
CVE: CVE-2015-8308
Published: 2017-08-24
Description: LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2015/11/20/6; https://bugzilla.redhat.com/show_bug.cgi?id=1284460; http://www.openwall.com/lists/oss-security/2015/11/20/6
CVE: CVE-2015-4699
Published: 2017-08-24
Description: Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Dec/48; http://www.quantumleap.it/cloud4wi-splash-portal-reflected-xss-vulnerability-cve-2015-4699/; https://cloud4wi.zendesk.com/hc/en-us/articles/204956829-Cloud4Wi-5-9-7-Release-Note
CVE: CVE-2015-8352
Published: 2017-08-24
Description: Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/537129/100/0/threaded; https://www.exploit-db.com/exploits/39017/; https://www.htbridge.com/advisory/HTB23282
CVE: CVE-2015-8355
Published: 2017-08-24
Description: Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) order or (2) "by" parameter to admin/orion.extfeedbackform_efbf_forms.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/537130/100/0/threaded; https://www.htbridge.com/advisory/HTB23280; http://www.securityfocus.com/archive/1/537130/100/0/threaded
CVE: CVE-2017-13686
Published: 2017-08-24
Description: net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205; https://github.com/torvalds/linux/commit/bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205
CVE: CVE-2017-13692
Published: 2017-08-25
Description: In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100506; https://github.com/htacg/tidy-html5/issues/588; http://www.securityfocus.com/bid/100506
CVE: CVE-2017-13693
Published: 2017-08-25
Description: The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100502; https://github.com/acpica/acpica/pull/295; https://github.com/acpica/acpica/pull/295/commits/987a3b5cf7175916e2a4b6ea5b8e70f830dfe732
CVE: CVE-2017-13694
Published: 2017-08-25
Description: The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and node_ext caches and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100500; https://github.com/acpica/acpica/pull/278; https://github.com/acpica/acpica/pull/278/commits/4a0243ecb4c94e2d73510d096c5ea4d0711fc6c0
CVE: CVE-2017-13695
Published: 2017-08-25
Description: The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100497; https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5; https://patchwork.kernel.org/patch/9850567/
CVE: CVE-2016-5816
Published: 2017-08-25
Description: A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01
CVE: CVE-2017-12703
Published: 2017-08-25
Description: A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/100470; https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01; http://www.securityfocus.com/bid/100470
CVE: CVE-2017-12709
Published: 2017-08-25
Description: A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded credentials, which could allow for unauthorized local low-privileged access to the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/100470; https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01; http://www.securityfocus.com/bid/100470
CVE: CVE-2017-13697
Published: 2017-08-25
Description: controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS; http://www.bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS
CVE: CVE-2014-7857
Published: 2017-08-25
Description: D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2015/May/125; http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE: CVE-2014-7858
Published: 2017-08-25
Description: The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2015/May/125; http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE: CVE-2014-7859
Published: 2017-08-25
Description: Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2015/May/125; http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE: CVE-2014-7860
Published: 2017-08-25
Description: The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos and publish them to an arbitrary Facebook profile via a target album_id and access_token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-287
References: http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2015/May/125; http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE: CVE-2014-9564
Published: 2017-08-25
Description: CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting (XSS) attacks, or obtain sensitive information via multiple unspecified parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://www.securityfocus.com/bid/74931; https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5098173; http://www.securityfocus.com/bid/74931
CVE: CVE-2014-9637
Published: 2017-08-25
Description: GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://advisories.mageia.org/MGASA-2015-0068.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154214.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148953.html
CVE: CVE-2015-1324
Published: 2017-08-25
Description: Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74767; http://www.ubuntu.com/usn/USN-2609-1; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239
CVE: CVE-2015-1325
Published: 2017-08-25
Description: Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2015/05/21/10; http://www.securityfocus.com/bid/74769; http://www.ubuntu.com/usn/USN-2609-1
CVE: CVE-2015-1395
Published: 2017-08-25
Description: Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154214.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148953.html; http://www.openwall.com/lists/oss-security/2015/01/27/28
CVE: CVE-2015-3206
Published: 2017-08-25
Description: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2015/05/21/3; http://www.securityfocus.com/bid/74760; https://bugzilla.redhat.com/show_bug.cgi?id=1223802
CVE: CVE-2015-3211
Published: 2017-08-25
Description: php-fpm allows local users to write to or create arbitrary files via a symlink attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=1228721; https://bugzilla.redhat.com/show_bug.cgi?id=1228721
CVE: CVE-2015-3257
Published: 2017-08-25
Description: Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/75466; https://framework.zend.com/security/advisory/ZF2015-05; http://www.securityfocus.com/bid/75466
CVE: CVE-2015-4017
Published: 2017-08-25
Description: Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2015/05/19/2; https://bugzilla.redhat.com/show_bug.cgi?id=1222960; https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html
CVE: CVE-2015-4180
Published: 2017-08-25
Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this vulnerability exists due to an incomplete fix to CVE-2009-4050.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2015/06/04/10; http://www.openwall.com/lists/oss-security/2015/06/04/10
CVE: CVE-2015-4181
Published: 2017-08-25
Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2015/06/04/10; http://www.openwall.com/lists/oss-security/2015/06/04/10
CVE: CVE-2015-5700
Published: 2017-08-25
Description: mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2015/07/30/6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139; https://bugzilla.redhat.com/show_bug.cgi?id=1181167
CVE: CVE-2015-5701
Published: 2017-08-25
Description: mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.  NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2015/07/30/6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139; https://bugzilla.redhat.com/show_bug.cgi?id=1181167
CVE: CVE-2017-12694
Published: 2017-08-25
Description: A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/100456; https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03; http://www.securityfocus.com/bid/100456
CVE: CVE-2017-12707
Published: 2017-08-25
Description: A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted html file may cause a stack overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/100453; https://ics-cert.us-cert.gov/advisories/ICSA-17-234-02; http://www.securityfocus.com/bid/100453
CVE: CVE-2017-12857
Published: 2017-08-25
Description: Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's memory which could contain an administrator's password or other sensitive information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: http://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-information-disclosure-on-polycom-voice-products-v1.0.pdf; http://www.securitytracker.com/id/1039309; http://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-information-disclosure-on-polycom-voice-products-v1.0.pdf
CVE: CVE-2017-7926
Published: 2017-08-25
Description: A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/99058; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-03; http://www.securityfocus.com/bid/99058
CVE: CVE-2017-7930
Published: 2017-08-25
Description: An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/99059; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02; http://www.securityfocus.com/bid/99059
CVE: CVE-2017-7934
Published: 2017-08-25
Description: An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an undefined manner.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/99059; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02; http://www.securityfocus.com/bid/99059
CVE: CVE-2017-9640
Published: 2017-08-25
Description: A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/100452; https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01; https://www.exploit-db.com/exploits/42543/
CVE: CVE-2017-9644
Published: 2017-08-25
Description: An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-428, CWE-428
References: http://www.securityfocus.com/bid/100454; https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01; https://www.exploit-db.com/exploits/42542/