deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25604
Published: 2020-09-23
Description: An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
CVE: CVE-2015-4719
Published: 2020-09-24
Description: The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2020-15604
Published: 2020-09-24
Description: An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-494
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09890; https://helpcenter.trendmicro.com/ja-jp/article/TMKA-09673; https://jvn.jp/en/jp/JVN60093979/
CVE: CVE-2020-24560
Published: 2020-09-24
Description: An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-295: Improper server certificate verification in the communication with the update server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09890; https://helpcenter.trendmicro.com/ja-jp/article/TMKA-09673; https://jvn.jp/en/jp/JVN60093979/
CVE: CVE-2020-16147
Published: 2020-09-24
Description: The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticated code injection over the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://podalirius.net/cves/2020-16147/; https://podalirius.net/en/cves/2020-16147/; https://podalirius.net/cves/2020-16147/
CVE: CVE-2020-16148
Published: 2020-09-24
Description: The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via authenticated code injection over the network.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://podalirius.net/cves/2020-16148/; https://podalirius.net/en/cves/2020-16148/; https://podalirius.net/cves/2020-16148/
CVE: CVE-2020-22453
Published: 2020-09-24
Description: Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://help.untis.at/hc/en-150/articles/[PII_REDACTED]99; https://robin.meis.space/2020/03/11/notenmanipulation-in-elektronischen-klassenbuchern/; https://help.untis.at/hc/en-150/articles/[PII_REDACTED]99
CVE: CVE-2020-6020
Published: 2020-09-24
Description: Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://supportcontent.checkpoint.com/solutions?id=sk142952; https://supportcontent.checkpoint.com/solutions?id=sk142952
CVE: CVE-2020-12280
Published: 2020-09-24
Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12816
Published: 2020-09-24
Description: An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-002; https://www.fortiguard.com/psirt/FG-IR-20-002; https://fortiguard.com/advisory/FG-IR-20-002
CVE: CVE-2020-12817
Published: 2020-09-24
Description: An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-054; https://fortiguard.com/advisory/FG-IR-20-054
CVE: CVE-2020-12818
Published: 2020-09-24
Description: An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
CVSS Score: 5.3 (MEDIUM)
References: https://fortiguard.com/advisory/FG-IR-20-033; https://www.fortiguard.com/psirt/FG-IR-20-033; https://fortiguard.com/advisory/FG-IR-20-033
CVE: CVE-2020-13499
Published: 2020-09-24
Description: An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106; https://us-cert.cisa.gov/ics/advisories/icsa-20-254-01; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106
CVE: CVE-2020-13500
Published: 2020-09-24
Description: SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter ClassName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106; https://us-cert.cisa.gov/ics/advisories/icsa-20-254-01; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106
CVE: CVE-2020-13501
Published: 2020-09-24
Description: An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106; https://us-cert.cisa.gov/ics/advisories/icsa-20-254-01; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106
CVE: CVE-2020-13502
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-13503
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-13504
Published: 2020-09-24
Description: Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
CVE: CVE-2020-13505
Published: 2020-09-24
Description: Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
CVE: CVE-2020-13507
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-13508
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-13521
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-15840
Published: 2020-09-24
Description: In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.
CVSS Score: 5.3 (MEDIUM)
References: https://issues.liferay.com/browse/LPE-17046; https://portal.liferay.dev/learn/security/known-vulnerabilities; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119772204
CVE: CVE-2020-24365
Published: 2020-09-24
Description: An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-1188
References: http://packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-Injection.html; https://pastebin.com/QTev1TjM; http://packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-Injection.html
CVE: CVE-2020-26088
Published: 2020-09-24
Description: A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2
CVE: CVE-2020-6153
Published: 2020-09-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-12281
Published: 2020-09-24
Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12282
Published: 2020-09-24
Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12837
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12838
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12839
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12840
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12841
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12842
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-12843
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-13119
Published: 2020-09-24
Description: ismartgate PRO 1.5.9 is vulnerable to clickjacking.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1021
References: https://ismartgate.com/secure-garage-door/; https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf; https://ismartgate.com/secure-garage-door/
CVE: CVE-2020-15222
Published: 2020-09-24
Description: In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.31.0, when using "private_key_jwt" authentication the uniqueness of the `jti` value is not checked. When using client authentication method "private_key_jwt", OpenId specification says the following about assertion `jti`: "A unique identifier for the token, which can be used to prevent reuse of the token. These tokens MUST only be used once, unless conditions for reuse were negotiated between the parties". Hydra does not seem to check the uniqueness of this `jti` value. This problem is fixed in version 0.31.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-345
References: https://github.com/ory/fosite/commit/0c9e0f6d654913ad57c507dd9a36631e1858a3e9; https://github.com/ory/fosite/security/advisories/GHSA-v3q9-2p3m-7g43; https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication
CVE: CVE-2020-15223
Published: 2020-09-24
Description: In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.34.0, the `TokenRevocationHandler` ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can use this for her advantage depends on the ability to trigger errors in the store. This is fixed in version 0.34.0
CVSS Score: 8.0 (HIGH)
CWE: CWE-755, CWE-754
References: https://github.com/ory/fosite/commit/03dd55813f5521985f7dd64277b7ba0cf1441319; https://github.com/ory/fosite/security/advisories/GHSA-7mqr-2v3q-v2wm; https://tools.ietf.org/html/rfc7009#section-2.2.1
CVE: CVE-2020-12811
Published: 2020-09-24
Description: An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-005; https://fortiguard.com/advisory/FG-IR-20-005
CVE: CVE-2020-12815
Published: 2020-09-24
Description: An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-054; https://fortiguard.com/advisory/FG-IR-20-054
CVE: CVE-2020-3141
Published: 2020-09-24
Description: Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM
CVE: CVE-2020-3359
Published: 2020-09-24
Description: A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device. A successful exploit could cause a device to reload, resulting in a DoS condition.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mdns-dos-3tH6cA9J; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mdns-dos-3tH6cA9J
CVE: CVE-2020-3390
Published: 2020-09-24
Description: A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to the lack of input validation of the information used to generate an SNMP trap in relation to a wireless client connection. An attacker could exploit this vulnerability by sending an 802.1x packet with crafted parameters during the wireless authentication setup phase of a connection. A successful exploit could allow the attacker to cause the device to reload, causing a DoS condition.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K
CVE: CVE-2020-3393
Published: 2020-09-24
Description: A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the underlying Linux operating system. These commands could be run as the root user. The vulnerability is due to a combination of two factors: (a) incomplete input validation of the user payload of CLI commands, and (b) improper role-based access control (RBAC) when commands are issued at the command line within the application-hosting subsystem. An attacker could exploit this vulnerability by using a CLI command with crafted user input. A successful exploit could allow the lower-privileged attacker to execute arbitrary CLI commands with root privileges. The attacker would need valid user credentials to exploit this vulnerability.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-269, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-iox-app-host-mcZcnsBt; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-iox-app-host-mcZcnsBt
CVE: CVE-2020-3396
Published: 2020-09-24
Description: A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sensitive areas of the file system, including the namespace container protections. The vulnerability occurs because the USB 3.0 SSD control data is not stored on the internal boot flash. An attacker could exploit this vulnerability by removing the USB 3.0 SSD, modifying or deleting files on the USB 3.0 SSD by using another device, and then reinserting the USB 3.0 SSD on the original device. A successful exploit could allow the attacker to remove container protections and perform file actions outside the namespace of the container with root privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-usb-guestshell-WmevScDj; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-usb-guestshell-WmevScDj
CVE: CVE-2020-3399
Published: 2020-09-24
Description: A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of an affected device. The vulnerability is due to insufficient input validation during CAPWAP packet processing. An attacker could exploit this vulnerability by sending a crafted CAPWAP packet to an affected device, resulting in a buffer over-read. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition on the affected device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-126, CWE-125
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capwap-dos-ShFzXf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capwap-dos-ShFzXf