deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36045
Published: 2022-08-31
Description: NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. `utils.generateUUID`, a helper function available in essentially all versions of NodeBB (as far back as v1.0.1 and potentially earlier) used a cryptographically insecure Pseudo-random number generator (`Math.random()`), which meant that a specially crafted script combined with multiple invocations of the password reset functionality could enable an attacker to correctly calculate the reset code for an account they do not have access to. This vulnerability impacts all installations of NodeBB. The vulnerability allows for an attacker to take over any account without the involvement of the victim, and as such, the remediation should be applied immediately (either via NodeBB upgrade or cherry-pick of the specific changeset. The vulnerability has been patched in version 2.x and 1.19.x. There is no known workaround, but the patch sets listed above will fully patch the vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-330, CWE-338, CWE-338
References: https://github.com/NodeBB/NodeBB/commit/81e3c1ba488d03371a5ce8d0ebb5c5803026e0f9; https://github.com/NodeBB/NodeBB/commit/e802fab87f94a13f397f04cfe6068f2f7ddf7888; https://github.com/NodeBB/NodeBB/security/advisories/GHSA-p4cc-w597-6cpm
CVE: CVE-2020-35536
Published: 2022-08-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-35537
Published: 2022-08-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-35538
Published: 2022-08-31
Description: A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30; https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441; https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30
CVE: CVE-2022-1205
Published: 2022-08-31
Description: A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-416, CWE-476
References: https://access.redhat.com/security/cve/CVE-2022-1205; https://bugzilla.redhat.com/show_bug.cgi?id=2071047; https://github.com/torvalds/linux/commit/82e31755e55fbcea6a9dfaae5fe4860ade17cbc0
CVE: CVE-2022-1247
Published: 2022-08-31
Description: An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the rose driver calls rose_del_node() and removes neighbours only if their “count” and “use” are zero.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://access.redhat.com/security/cve/CVE-2022-1247; https://bugzilla.redhat.com/show_bug.cgi?id=2066799; https://access.redhat.com/security/cve/CVE-2022-1247
CVE: CVE-2022-1259
Published: 2022-08-31
Description: A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/security/cve/CVE-2022-1259; https://bugzilla.redhat.com/show_bug.cgi?id=2072339; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-1263
Published: 2022-08-31
Description: A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/security/cve/CVE-2022-1263; https://bugzilla.redhat.com/show_bug.cgi?id=2072698; https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4
CVE: CVE-2022-1271
Published: 2022-08-31
Description: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-179, CWE-20
References: https://access.redhat.com/security/cve/CVE-2022-1271; https://bugzilla.redhat.com/show_bug.cgi?id=2073310; https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6
CVE: CVE-2022-1319
Published: 2022-08-31
Description: A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-252
References: https://access.redhat.com/security/cve/CVE-2022-1319; https://bugzilla.redhat.com/show_bug.cgi?id=2073890; https://github.com/undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b
CVE: CVE-2022-1325
Published: 2022-08-31
Description: A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://access.redhat.com/security/cve/CVE-2022-1325; https://bugzilla.redhat.com/show_bug.cgi?id=2074549; https://github.com/GreycLab/CImg/commit/619cb58dd90b4e03ac68286c70ed98acbefd1c90
CVE: CVE-2022-1354
Published: 2022-08-31
Description: A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://access.redhat.com/security/cve/CVE-2022-1354; https://bugzilla.redhat.com/show_bug.cgi?id=2074404; https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798
CVE: CVE-2022-1355
Published: 2022-08-31
Description: A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-121, CWE-119
References: https://access.redhat.com/security/cve/CVE-2022-1355; https://bugzilla.redhat.com/show_bug.cgi?id=2074415; https://gitlab.com/libtiff/libtiff/-/issues/400
CVE: CVE-2022-1404
Published: 2022-08-31
Description: Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01
CVE: CVE-2022-1405
Published: 2022-08-31
Description: CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01
CVE: CVE-2022-1508
Published: 2022-08-31
Description: An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This flaw allows a local user to read some memory out of bounds.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2022-1508; https://bugzilla.redhat.com/show_bug.cgi?id=2075533; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c2b3b74918200e46699338d7bcc19b1ea12110
CVE: CVE-2022-1552
Published: 2022-08-31
Description: A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
CVSS Score: 8.8 (HIGH)
CWE: CWE-459, CWE-89, CWE-459
References: https://access.redhat.com/security/cve/CVE-2022-1552; https://bugzilla.redhat.com/show_bug.cgi?id=2081126; https://security.gentoo.org/glsa/202211-04
CVE: CVE-2022-1888
Published: 2022-08-31
Description: Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-151-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-151-01
CVE: CVE-2022-1974
Published: 2022-08-31
Description: A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-416, CWE-367
References: https://github.com/torvalds/linux/commit/da5c0f119203ad[PII_REDACTED]a0f52a6d850c01cd; https://github.com/torvalds/linux/commit/da5c0f119203ad[PII_REDACTED]a0f52a6d850c01cd
CVE: CVE-2022-1975
Published: 2022-08-31
Description: There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-248
References: https://github.com/torvalds/linux/commit/4071bf121d59944d5cd2238de0642f3d7995a997; https://github.com/torvalds/linux/commit/4071bf121d59944d5cd2238de0642f3d7995a997
CVE: CVE-2022-1976
Published: 2022-08-31
Description: A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to memory corruption and possible privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2092549; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=2092549
CVE: CVE-2022-21941
Published: 2022-08-31
Description: All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-11; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-11
CVE: CVE-2022-26330
Published: 2022-08-31
Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.microfocus.com/s/article/KM000010167?language=en_US; https://www.microfocus.com/support/downloads/; https://portal.microfocus.com/s/article/KM000010167?language=en_US
CVE: CVE-2022-26331
Published: 2022-08-31
Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://portal.microfocus.com/s/article/KM000010167?language=en_US; https://www.microfocus.com/support/downloads/; https://portal.microfocus.com/s/article/KM000010167?language=en_US
CVE: CVE-2022-28625
Published: 2022-08-31
Description: A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04304en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04304en_us
CVE: CVE-2022-2003
Published: 2022-08-31
Description: AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to respond with the PLC password in cleartext. This could allow an attacker to access and make unauthorized changes. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;
CVSS Score: 7.7 (HIGH)
CWE: CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-02
CVE: CVE-2022-2004
Published: 2022-08-31
Description: AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03
CVE: CVE-2022-2005
Published: 2022-08-31
Description: AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-01
CVE: CVE-2022-2006
Published: 2022-08-31
Description: AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-01
CVE: CVE-2022-2043
Published: 2022-08-31
Description: MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-04
CVE: CVE-2022-2044
Published: 2022-08-31
Description: MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or potentially bricking the device.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-04
CVE: CVE-2022-2132
Published: 2022-08-31
Description: A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
CVSS Score: 8.6 (HIGH)
CWE: CWE-791
References: https://bugs.dpdk.org/show_bug.cgi?id=1031; https://bugzilla.redhat.com/show_bug.cgi?id=2099475; https://lists.debian.org/debian-lts-announce/2022/09/msg00000.html
CVE: CVE-2022-2153
Published: 2022-08-31
Description: A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2069736; https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f[PII_REDACTED]c46ce; https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a
CVE: CVE-2022-2220
Published: 2022-08-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-2466
Published: 2022-08-31
Description: It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444, CWE-444
References: https://github.com/quarkusio/quarkus/issues/26748; https://github.com/quarkusio/quarkus/issues/26748
CVE: CVE-2022-2485
Published: 2022-08-31
Description: Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-319, CWE-319
References: https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-05; https://cdn.automationdirect.com/static/firmware/product_advisory/PA-COM-006.pdf
CVE: CVE-2022-2519
Published: 2022-08-31
Description: There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://gitlab.com/libtiff/libtiff/-/issues/423; https://gitlab.com/libtiff/libtiff/-/merge_requests/378; https://www.debian.org/security/2023/dsa-5333
CVE: CVE-2022-2520
Published: 2022-08-31
Description: A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-131, CWE-617
References: https://gitlab.com/libtiff/libtiff/-/issues/424; https://gitlab.com/libtiff/libtiff/-/merge_requests/378; https://www.debian.org/security/2023/dsa-5333
CVE: CVE-2022-2521
Published: 2022-08-31
Description: It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-763, CWE-763
References: https://gitlab.com/libtiff/libtiff/-/issues/422; https://gitlab.com/libtiff/libtiff/-/merge_requests/378; https://www.debian.org/security/2023/dsa-5333
CVE: CVE-2022-2590
Published: 2022-08-31
Description: A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://lore.kernel.org/linux-mm/[PII_REDACTED]3232.8808-1-david%40redhat.com/; https://www.openwall.com/lists/oss-security/2022/08/08/1; https://lore.kernel.org/linux-mm/[PII_REDACTED]3232.8808-1-david%40redhat.com/
CVE: CVE-2022-2758
Published: 2022-08-31
Description: Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-02
CVE: CVE-2022-2759
Published: 2022-08-31
Description: Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. This may allow an attacker to view sensitive documents and information on the affected host.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-03
CVE: CVE-2022-2866
Published: 2022-08-31
Description: FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01