deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21942
Published: 2022-04-14
Description: An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1371; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1371
CVE: CVE-2021-21943
Published: 2022-04-14
Description: A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-1284
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1373; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1373
CVE: CVE-2021-21944
Published: 2022-04-14
Description: Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the first 12 bits from local variable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1374; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1374
CVE: CVE-2021-21945
Published: 2022-04-14
Description: Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the second 12 bits from local variable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1374; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1374
CVE: CVE-2021-21946
Published: 2022-04-14
Description: Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is lower than 9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1375; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1375
CVE: CVE-2021-21947
Published: 2022-04-14
Description: Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is greater or equal than 9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-129
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1375; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1375
CVE: CVE-2021-21948
Published: 2022-04-14
Description: A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1376; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1376
CVE: CVE-2021-21949
Published: 2022-04-14
Description: An improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to an out-of-bounds write and potential code exectuion. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1377; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1377
CVE: CVE-2021-21956
Published: 2022-04-14
Description: A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1383; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1383
CVE: CVE-2021-21967
Published: 2022-04-14
Description: An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1394; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1394
CVE: CVE-2021-40390
Published: 2022-04-14
Description: An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1401; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1401
CVE: CVE-2021-40392
Published: 2022-04-14
Description: An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1403; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1403
CVE: CVE-2021-40398
Published: 2022-04-14
Description: An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1411; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1411
CVE: CVE-2021-40400
Published: 2022-04-14
Description: An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1413; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1413
CVE: CVE-2021-40402
Published: 2022-04-14
Description: An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1416; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1416
CVE: CVE-2021-40405
Published: 2022-04-14
Description: A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-404
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1422; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1422
CVE: CVE-2021-40422
Published: 2022-04-14
Description: An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798, CWE-330, CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1431; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1431
CVE: CVE-2021-40424
Published: 2022-04-14
Description: An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. The GetProcessCommandLine IOCTL request could cause an out-of-bounds read in the device driver WRCore_x64. An attacker can issue an ioctl to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433
CVE: CVE-2021-40425
Published: 2022-04-14
Description: An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. An IOCTL_B03 request with specific invalid data causes a similar issue in the device driver WRCore_x64. An attacker can issue an ioctl to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433
CVE: CVE-2021-40426
Published: 2022-04-14
Description: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.openwall.com/lists/oss-security/2023/02/03/3; https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1434
CVE: CVE-2021-43257
Published: 2022-04-14
Description: Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda[PII_REDACTED]dbc3e; https://www.mantisbt.org/bugs/view.php?id=29130; https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda[PII_REDACTED]dbc3e
CVE: CVE-2021-44354
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44355
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44356
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44357
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44366
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44375
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2021-44394
Published: 2022-04-14
Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE: CVE-2022-21145
Published: 2022-04-14
Description: A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442; https://www.lansweeper.com/changelog/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442
CVE: CVE-2022-21154
Published: 2022-04-14
Description: An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file can lead to an integer overflow, that in turn causes a buffer overflow. An attacker can provide a malicious BMP file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://files.leadtools.com/index.php/s/joFz7BcCZYMot5Q; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1464; https://files.leadtools.com/index.php/s/joFz7BcCZYMot5Q
CVE: CVE-2022-21210
Published: 2022-04-14
Description: An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444; https://www.lansweeper.com/changelog/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444
CVE: CVE-2022-21234
Published: 2022-04-14
Description: An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1443; https://www.lansweeper.com/changelog/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1443
CVE: CVE-2022-22149
Published: 2022-04-14
Description: A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441; https://www.lansweeper.com/changelog/; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441
CVE: CVE-2022-28711
Published: 2022-04-14
Description: A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1512; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1512; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1512
CVE: CVE-2020-16238
Published: 2022-04-14
Description: A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25150
Published: 2022-04-14
Description: A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.
CVSS Score: 7.6 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25152
Published: 2022-04-14
Description: A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25154
Published: 2022-04-14
Description: An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25156
Published: 2022-04-14
Description: Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-489
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25158
Published: 2022-04-14
Description: A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25160
Published: 2022-04-14
Description: Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25162
Published: 2022-04-14
Description: A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-643
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html