deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0329
Published: 2022-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-0318
Published: 2022-01-21
Description: Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2020-19858
Published: 2022-01-21
Description: Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim's privacy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/plutinosoft/Platinum/commit/9a4ceaccb1585ec35c45fd8e2585538fff6a865e; https://github.com/plutinosoft/Platinum/issues/22; https://github.com/plutinosoft/Platinum/commit/9a4ceaccb1585ec35c45fd8e2585538fff6a865e
CVE: CVE-2020-19860
Published: 2022-01-21
Description: When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/NLnetLabs/ldns/commit/15d96206996bea969fbc918eb0a4a346f514b9f3; https://github.com/NLnetLabs/ldns/issues/50; https://github.com/NLnetLabs/ldns/commit/15d96206996bea969fbc918eb0a4a346f514b9f3
CVE: CVE-2022-0319
Published: 2022-01-21
Description: Out-of-bounds Read in vim/vim prior to 8.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2020-19861
Published: 2022-01-21
Description: When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/NLnetLabs/ldns/issues/51; https://cwe.mitre.org/data/definitions/126.html
CVE: CVE-2021-35003
Published: 2022-01-21
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.73164(5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14655.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-22-080/; https://www.zerodayinitiative.com/advisories/ZDI-22-080/
CVE: CVE-2021-35004
Published: 2022-01-21
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(5553) wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14656.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-22-081/; https://www.zerodayinitiative.com/advisories/ZDI-22-081/
CVE: CVE-2021-40855
Published: 2022-01-21
Description: The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://github.com/eu-digital-green-certificates/dgc-overview/security/advisories/GHSA-xcvc-p4fw-qmcj; https://www.consilium.europa.eu/en/policies/coronavirus/eu-digital-covid-certificate/; https://github.com/eu-digital-green-certificates/dgc-overview/security/advisories/GHSA-xcvc-p4fw-qmcj
CVE: CVE-2021-46198
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Courier-Management-System; https://www.nu11secur1ty.com/2022/01/courier-management-system-10-sql.html; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Courier-Management-System
CVE: CVE-2021-46200
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Music-Cloud-Community-System; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Music-Cloud-Community-System
CVE: CVE-2021-46201
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Resort-Management-System-1.0; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Resort-Management-System-1.0
CVE: CVE-2021-46307
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Projectworlds/2022/Online%20Examination%20System; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Projectworlds/2022/Online%20Examination%20System
CVE: CVE-2022-23220
Published: 2022-01-21
Description: USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu, Debian, and Gentoo.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: http://www.openwall.com/lists/oss-security/2022/01/22/1; https://github.com/gregkh/usbview/commit/bf374fa4e5b9a756789dfd88efa93806a395463b; https://security.gentoo.org/glsa/202310-15
CVE: CVE-2021-46308
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Railway-Reservation; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Railway-Reservation
CVE: CVE-2021-46309
Published: 2022-01-21
Description: An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Employee-and-Visitor-Gate-Pass-Logging; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Employee-and-Visitor-Gate-Pass-Logging
CVE: CVE-2020-4875
Published: 2022-01-21
Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190838.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190838; https://www.ibm.com/support/pages/node/6509856; https://exchange.xforce.ibmcloud.com/vulnerabilities/190838
CVE: CVE-2020-4876
Published: 2022-01-21
Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190839.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190839; https://www.ibm.com/support/pages/node/6509856; https://exchange.xforce.ibmcloud.com/vulnerabilities/190839
CVE: CVE-2020-4877
Published: 2022-01-21
Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190843; https://www.ibm.com/support/pages/node/6509856; https://exchange.xforce.ibmcloud.com/vulnerabilities/190843
CVE: CVE-2020-4879
Published: 2022-01-21
Description: IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190847; https://www.ibm.com/support/pages/node/6509856; https://exchange.xforce.ibmcloud.com/vulnerabilities/190847
CVE: CVE-2021-4016
Published: 2022-01-21
Description: Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://docs.rapid7.com/release-notes/insightagent/20220119/; https://docs.rapid7.com/release-notes/insightagent/20220119/
CVE: CVE-2022-0323
Published: 2022-01-21
Description: Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1336, CWE-94
References: https://github.com/bobthecow/mustache.php/commit/579ffa5c96e1d292c060b3dd62811ff01ad8c24e; https://huntr.dev/bounties/a5f5a988-aa52-4443-839d-299a63f44fb7; https://github.com/bobthecow/mustache.php/commit/579ffa5c96e1d292c060b3dd62811ff01ad8c24e
CVE: CVE-2021-23195
Published: 2022-01-21
Description: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-548, CWE-200
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-23196
Published: 2022-01-21
Description: The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
CVSS Score: 7.3 (HIGH)
CWE: CWE-522, CWE-287
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-23207
Published: 2022-01-21
Description: An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-23233
Published: 2022-01-21
Description: Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration parameters.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-23236
Published: 2022-01-21
Description: Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-31562
Published: 2022-01-21
Description: The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-33843
Published: 2022-01-21
Description: Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An attacker may use this functionality to change the exposed configuration values such as network settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-33846
Published: 2022-01-21
Description: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-33848
Published: 2022-01-21
Description: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-33966
Published: 2022-01-21
Description: Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/162731/Spotweb-Develop-1.4.9-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/162731/Spotweb-Develop-1.4.9-Cross-Site-Scripting.html
CVE: CVE-2021-40247
Published: 2022-01-21
Description: SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/B%26E%20Tracker-by:oretnom23-v1.0; https://www.sourcecodester.com/php/14893/budget-and-expense-tracker-system-php-free-source-code.html; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/B%26E%20Tracker-by:oretnom23-v1.0
CVE: CVE-2021-41835
Published: 2022-01-21
Description: Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
CVSS Score: 7.3 (HIGH)
CWE: CWE-327, CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-43355
Published: 2022-01-21
Description: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users might not support or block JavaScript or intentionally bypass the client-side checks. An attacker with knowledge of the service user could circumvent the client-side control and login with service privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-603, CWE-287
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-44464
Published: 2022-01-21
Description: Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE: CVE-2021-44593
Published: 2022-01-21
Description: Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/Mister-Joe/CVE-2021-44593; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44593; https://www.nu11secur1ty.com/2022/01/cve-2021-44593.html
CVE: CVE-2021-4001
Published: 2022-01-21
Description: A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://bugzilla.redhat.com/show_bug.cgi?id=2025645; https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=353050be4c19e102178ccc[PII_REDACTED]7c25ae53; https://bugzilla.redhat.com/show_bug.cgi?id=2025645
CVE: CVE-2021-4032
Published: 2022-01-21
Description: A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service. This flaw affects kernel versions prior to 5.15 rc7.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://bugzilla.redhat.com/show_bug.cgi?id=2027403; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7d8a19f9a056a05c5c509fa65af472a322abfee; https://lkml.org/lkml/2021/9/8/587
CVE: CVE-2022-23127
Published: 2022-01-21
Description: Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/vu/JVNVU95403720/index.html; https://www.cisa.gov/uscert/ics/advisories/icsa-22-020-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-025_en.pdf
CVE: CVE-2022-23128
Published: 2022-01-21
Description: Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of MC Works64, GENESIS64, Hyper Historian, AnalytiX and MobileHMI, and gain unauthorized access to the products, by sending specially crafted WebSocket packets to FrameWorX server, one of the functions of the products.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/vu/JVNVU95403720/index.html; https://www.cisa.gov/uscert/ics/advisories/icsa-22-020-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-026_en.pdf
CVE: CVE-2022-23129
Published: 2022-01-21
Description: Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://jvn.jp/vu/JVNVU95403720/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-027_en.pdf
CVE: CVE-2022-23130
Published: 2022-01-21
Description: Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 and prior, Mitsubishi Electric GENESIS32 versions 9.7 and prior, and Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior allows an attacker to cause a DoS condition in the database server by getting a legitimate user to import a configuration file containing specially crafted stored procedures into GENESIS64, ICONICS Suite, MC Works64, or GENESIS32 and execute commands against the database from GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://jvn.jp/vu/JVNVU95403720/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-028_en.pdf
CVE: CVE-2022-23728
Published: 2022-01-21
Description: Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-684
References: https://lgsecurity.lge.com/bulletins/mobile; https://lgsecurity.lge.com/bulletins/mobile