deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-42924
Published: 2023-12-12
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/9; https://support.apple.com/en-us/HT214036
CVE: CVE-2023-42926
Published: 2023-12-12
Description: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html; http://seclists.org/fulldisclosure/2023/Dec/9; https://support.apple.com/en-us/HT214036
CVE: CVE-2023-42927
Published: 2023-12-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-42932
Published: 2023-12-12
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2023-49058
Published: 2023-12-12
Description: SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.


CVSS Score: 3.5 (LOW)
CWE: CWE-22
References: https://me.sap.com/notes/3363690; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3363690
CVE: CVE-2023-46219
Published: 2023-12-12
Description: When saving HSTS data to an excessively long file name, curl could end up
removing all contents, making subsequent requests using that file unaware of
the HSTS status they should otherwise use.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311, CWE-311
References: https://curl.se/docs/CVE-2023-46219.html; https://hackerone.com/reports/2236133; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
CVE: CVE-2023-49577
Published: 2023-12-12
Description: The SAP HCM (SMART PAYE solution) - versions S4HCMCIE 100, SAP_HRCIE 600, SAP_HRCIE 604, SAP_HRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3217087; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3217087
CVE: CVE-2023-49578
Published: 2023-12-12
Description: SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity  of the application.
CVSS Score: 3.5 (LOW)
CWE: CWE-732
References: https://me.sap.com/notes/3362463; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3362463
CVE: CVE-2023-49580
Published: 2023-12-12
Description: SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to create Layout configurations of the ABAP List Viewer and with this causing a mild impact on integrity and availability, e.g. also increasing the response times of the AS ABAP.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://me.sap.com/notes/3385711; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3385711
CVE: CVE-2023-49581
Published: 2023-12-12
Description: SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doing so the attacker could increase response times of the AS ABAP, leading to mild impact on availability.


CVSS Score: 4.1 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://me.sap.com/notes/3392547; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3392547
CVE: CVE-2023-49583
Published: 2023-12-12
Description: SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-749
References: https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/; https://me.sap.com/notes/3411067; https://me.sap.com/notes/3412456
CVE: CVE-2023-49584
Published: 2023-12-12
Description: SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_BASIS 793, allows an attacker to use HTTP verb POST on read-only service causing low impact on Confidentiality of the application.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-444
References: https://me.sap.com/notes/3406786; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3406786
CVE: CVE-2023-49587
Published: 2023-12-12
Description: SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://me.sap.com/notes/3395306; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3395306
CVE: CVE-2023-50422
Published: 2023-12-12
Description: SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-749
References: https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/; https://github.com/SAP/cloud-security-services-integration-library/; https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73
CVE: CVE-2023-50423
Published: 2023-12-12
Description: SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-749
References: https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/; https://github.com/SAP/cloud-pysec/; https://github.com/SAP/cloud-pysec/security/advisories/GHSA-6mjg-37cp-42x5
CVE: CVE-2023-5536
Published: 2023-12-12
Description: A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-276
References: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1829071; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5536; https://discourse.ubuntu.com/t/easy-multi-user-lxd-setup/26215/4
CVE: CVE-2023-6542
Published: 2023-12-12
Description: Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL including application deep links on the device.


CVSS Score: 7.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://me.sap.com/notes/3406244; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3406244
CVE: CVE-2023-50424
Published: 2023-12-12
Description: SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-749
References: https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/; https://github.com/SAP/cloud-security-client-go; https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73
CVE: CVE-2023-6709
Published: 2023-12-12
Description: Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1336
References: https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625; https://huntr.com/bounties/9e4cc07b-6fff-421b-89bd-9445ef61d34d; https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625
CVE: CVE-2023-41113
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It allows an authenticated user to to obtain information about whether certain files exist on disk, what errors if any occur when attempting to read them, and some limited information about their contents (regardless of permissions). This can occur when a superuser has configured one or more directories for filesystem access via CREATE DIRECTORY and adopted certain non-default settings for log_line_prefix and log_connections.
CVSS Score: 4.3 (MEDIUM)
References: https://www.enterprisedb.com/docs/security/advisories/cve202341113/; https://www.enterprisedb.com/docs/security/advisories/cve202341113/
CVE: CVE-2023-41114
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the functions get_url_as_text and get_url_as_bytea that are publicly executable, thus permitting an authenticated user to read any file from the local filesystem or remote system regardless of that user's permissions.
CVSS Score: 6.5 (MEDIUM)
References: https://www.enterprisedb.com/docs/security/advisories/cve202341114/; https://www.enterprisedb.com/docs/security/advisories/cve202341114/
CVE: CVE-2023-41115
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. When using UTL_ENCODE, an authenticated user can read any large object, regardless of that user's permissions.
CVSS Score: 6.5 (MEDIUM)
References: https://www.enterprisedb.com/docs/security/advisories/cve202341115/; https://www.enterprisedb.com/docs/security/advisories/cve202341115/
CVE: CVE-2023-41116
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It allows an authenticated user to refresh any materialized view, regardless of that user's permissions.
CVSS Score: 4.3 (MEDIUM)
References: https://www.enterprisedb.com/docs/security/advisories/cve202341116/; https://www.enterprisedb.com/docs/security/advisories/cve202341116/
CVE: CVE-2023-41117
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against search_path attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.enterprisedb.com/docs/security/advisories/cve202341117/; https://www.enterprisedb.com/docs/security/advisories/cve202341117/
CVE: CVE-2023-41118
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying implementation functions. When a superuser has configured file locations using CREATE DIRECTORY, these functions allow users to take a wide range of actions, including read, write, copy, rename, and delete.
CVSS Score: 8.8 (HIGH)
References: https://www.enterprisedb.com/docs/security/advisories/cve202341118/; https://www.enterprisedb.com/docs/security/advisories/cve202341118/
CVE: CVE-2023-41119
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's privileges to superuser. This function accepts the OID of a table, and then accesses that table as the superuser by using SELECT and DML commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.enterprisedb.com/docs/security/advisories/cve202341119/; https://www.enterprisedb.com/docs/security/advisories/cve202341119/
CVE: CVE-2023-41120
Published: 2023-12-12
Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBMS_PROFILER to remove all accumulated profiling data on a system-wide basis, regardless of that user's permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://www.enterprisedb.com/docs/security/advisories/cve202341120/; https://www.enterprisedb.com/docs/security/advisories/cve202341120/
CVE: CVE-2022-48615
Published: 2023-12-12
Description: An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial device information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-284
References: https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/; https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
CVE: CVE-2022-48616
Published: 2023-12-12
Description: A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/; https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
CVE: CVE-2023-48641
Published: 2023-12-12
Description: Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass authorization checks, in order to gain execute access to AWF application resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/711859; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/711859
CVE: CVE-2023-48642
Published: 2023-12-12
Description: Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 (6.14.0) is also a fixed release.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/711859; https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/711859
CVE: CVE-2023-41623
Published: 2023-12-12
Description: Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41623; https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41623
CVE: CVE-2023-45316
Published: 2023-12-12
Description: Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.


CVSS Score: 7.3 (HIGH)
CWE: CWE-352, CWE-22, CWE-352
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-45847
Published: 2023-12-12
Description: Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-46701
Published: 2023-12-12
Description: Mattermost fails to perform authorization checks in the  /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-639
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-48677
Published: 2023-12-12
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://security-advisory.acronis.com/advisories/SEC-5620; https://security-advisory.acronis.com/advisories/SEC-5620
CVE: CVE-2023-49563
Published: 2023-12-12
Description: Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/ph4nt0mbyt3/b237bfb06b2bff405ab47e4ea52c0bd2; https://gist.github.com/ph4nt0mbyt3/b237bfb06b2bff405ab47e4ea52c0bd2
CVE: CVE-2023-49607
Published: 2023-12-12
Description: Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-49695
Published: 2023-12-12
Description: OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://jvn.jp/en/vu/JVNVU97499577/; https://www.elecom.co.jp/news/security/20231212-01/; https://jvn.jp/en/vu/JVNVU97499577/
CVE: CVE-2023-49809
Published: 2023-12-12
Description: Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled. 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-49874
Published: 2023-12-12
Description: Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-6547
Published: 2023-12-12
Description: Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but no permissions to the team the playbook is on to access and modify the playbook. This can happen if the user was once a member of the team, got permissions to the playbook and was then removed from the team. 


CVSS Score: 3.7 (LOW)
CWE: CWE-284
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2022-42784
Published: 2023-12-12
Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.
CVSS Score: 7.6 (HIGH)
CWE: CWE-1319
References: https://cert-portal.siemens.com/productcert/html/ssa-844582.html; https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf
CVE: CVE-2023-41963
Published: 2023-12-12
Description: Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://jvn.jp/en/jp/JVN34145838/; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]62/; https://jvn.jp/en/jp/JVN34145838/