deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13650
Published: 2020-06-15
Description: An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery (SSRF) that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to an internal component, the request is blind, but through the error message it's possible to determine whether the request targeted a open service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://know.bishopfox.com/advisories/digdash-version-2018; https://know.bishopfox.com/advisories/digdash-version-2018
CVE: CVE-2020-13651
Published: 2020-06-15
Description: An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client will obtain a rogue JNLP file specifying the installation of malicious JAR archives and executed with full privileges on the client computer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: https://know.bishopfox.com/advisories/digdash-version-2018; https://know.bishopfox.com/advisories/digdash-version-2018
CVE: CVE-2020-13652
Published: 2020-06-15
Description: An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting (XSS) vulnerability exists in the login menu.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://know.bishopfox.com/advisories/digdash-version-2018; https://know.bishopfox.com/advisories/digdash-version-2018
CVE: CVE-2020-14159
Published: 2020-06-15
Description: By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance by triggering an SQL injection vulnerability in /LabTech/agent.aspx. This affects versions before 2019.12.337, 2020 before 2020.1.53, 2020.2 before 2020.2.85, 2020.3 before 2020.3.114, 2020.4 before 2020.4.143, and 2020.5 before 2020.5.178.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.connectwise.com/company/trust#tab1; https://www.connectwise.com/company/trust#tab1
CVE: CVE-2020-11969
Published: 2020-06-15
Description: If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.openwall.com/lists/oss-security/2020/12/16/2; https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9%40%3Cdev.tomee.apache.org%3E; https://lists.apache.org/thread.html/rbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cannounce.apache.org%3E
CVE: CVE-2020-11999
Published: 2020-06-15
Description: FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to specify a filename to execute unauthorized code and modify files or data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.us-cert.gov/ics/advisories/icsa-20-163-02; https://www.us-cert.gov/ics/advisories/icsa-20-163-02
CVE: CVE-2020-12001
Published: 2020-06-15
Description: FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. The parsing mechanism that processes certain file types does not provide input sanitation. This may allow an attacker to use specially crafted files to traverse the file system and modify or expose sensitive data or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://www.us-cert.gov/ics/advisories/icsa-20-163-02; https://www.zerodayinitiative.com/advisories/ZDI-20-733/; https://www.us-cert.gov/ics/advisories/icsa-20-163-02
CVE: CVE-2020-12003
Published: 2020-06-15
Description: FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to use specially crafted requests to traverse the file system and expose sensitive data on the local hard drive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.us-cert.gov/ics/advisories/icsa-20-163-02; https://www.us-cert.gov/ics/advisories/icsa-20-163-02
CVE: CVE-2020-12005
Published: 2020-06-15
Description: FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. A vulnerability exists in the communication function that enables users to upload EDS files by FactoryTalk Linx. This may allow an attacker to upload a file with bad compression, consuming all the available CPU resources, leading to a denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.us-cert.gov/ics/advisories/icsa-20-163-02; https://www.us-cert.gov/ics/advisories/icsa-20-163-02
CVE: CVE-2020-12019
Published: 2020-06-15
Description: WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-20-161-01; https://www.us-cert.gov/ics/advisories/icsa-20-161-01
CVE: CVE-2020-5742
Published: 2020-06-15
Description: Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests.
CVSS Score: 8.8 (HIGH)
References: https://www.tenable.com/security/research/tra-2020-35; https://www.tenable.com/security/research/tra-2020-35
CVE: CVE-2020-5754
Published: 2020-06-15
Description: Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint agent.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-843
References: https://www.tenable.com/security/research/tra-2020-36; https://www.tenable.com/security/research/tra-2020-36
CVE: CVE-2020-5755
Published: 2020-06-15
Description: Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.tenable.com/security/research/tra-2020-36; https://www.tenable.com/security/research/tra-2020-36
CVE: CVE-2020-14163
Published: 2020-06-15
Description: An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read access to memory in ecma_gc_set_object_visited in ecma/base/ecma-gc.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/jerryscript-project/jerryscript/commit/c2b662170245a16f46ce02eae68815c325d99821; https://github.com/jerryscript-project/jerryscript/issues/3804; https://github.com/jerryscript-project/jerryscript/commit/c2b662170245a16f46ce02eae68815c325d99821
CVE: CVE-2020-5358
Published: 2020-06-15
Description: Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://www.dell.com/support/article/SLN321789; https://www.dell.com/support/article/SLN321789
CVE: CVE-2020-4051
Published: 2020-06-15
Description: In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.
CVSS Score: 3.7 (LOW)
CWE: CWE-79
References: https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301; https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6; https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html
CVE: CVE-2020-13431
Published: 2020-06-16
Description: I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/; https://geti2p.net/en; https://blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/
CVE: CVE-2019-18614
Published: 2020-06-16
Description: On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 bytes, but everything else is still configured to the usual size of 1092 (which was used for everything in the previous CYW20719 and later CYW20819 evaluation board). To trigger the overflow, an attacker can either send packets over the air or as unprivileged local user. Over the air, the minimal PoC is sending "l2ping -s 600" to the target address prior to any pairing. Locally, the buffer overflow is immediately triggered by opening an ACL or SCO connection to a headset. This occurs because, in WICED Studio 6.2 and 6.4, BT_ACL_HOST_TO_DEVICE_DEFAULT_SIZE and BT_ACL_DEVICE_TO_HOST_DEFAULT_SIZE are set to 384.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/seemoo-lab/frankenstein/blob/master/doc/CVE_2019_18614.md; https://github.com/seemoo-lab/frankenstein/blob/master/doc/CVE_2019_18614.md
CVE: CVE-2020-0223
Published: 2020-06-16
Description: This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0232
Published: 2020-06-16
Description: Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abc_pcie_dma_user_xfer_clean. If this happens, abc_pcie_start_dma_xfer and abc_pcie_wait_dma_xfer in the original thread will trigger UAF when working with the transfer object.Product: AndroidVersions: Android kernelAndroid ID: A-151453714
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0234
Published: 2020-06-16
Description: In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148189280
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0235
Published: 2020-06-16
Description: In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copy_from_user", ending up overwriting memory following "crus_sp_hdr". "crus_sp_hdr" is a static variable, of type "struct crus_sp_ioctl_header".Product: AndroidVersions: Android kernelAndroid ID: A-135129430
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-11838
Published: 2020-06-16
Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03650893; https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE: CVE-2020-11840
Published: 2020-06-16
Description: Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure.
CVSS Score: 4.3 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03650893; https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE: CVE-2020-11841
Published: 2020-06-16
Description: Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure.
CVSS Score: 4.3 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03650893; https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE: CVE-2020-12494
Published: 2020-06-16
Description: Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames. By this method, memory content is disclosed, however, an attacker can hardly control which memory content is affected. For example, the disclosure can be provoked with small sized ICMP echo requests sent to the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://cert.vde.com/en-us/advisories/vde-2020-019; https://cert.vde.com/en-us/advisories/vde-2020-019
CVE: CVE-2020-4310
Published: 2020-06-16
Description: IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 177081.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177081; https://www.ibm.com/support/pages/node/6223914; https://exchange.xforce.ibmcloud.com/vulnerabilities/177081
CVE: CVE-2020-4320
Published: 2020-06-16
Description: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177403; https://www.ibm.com/support/pages/node/5736885; https://exchange.xforce.ibmcloud.com/vulnerabilities/177403
CVE: CVE-2020-8541
Published: 2020-06-16
Description: OX App Suite through 7.10.3 allows XXE attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html; https://www.open-xchange.com/; https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html
CVE: CVE-2020-8542
Published: 2020-06-16
Description: OX App Suite through 7.10.3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158932/OX-App-Suite-OX-Documents-XSS-SSRF-Bypass.html; http://seclists.org/fulldisclosure/2020/Aug/14; https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html
CVE: CVE-2020-8543
Published: 2020-06-16
Description: OX App Suite through 7.10.3 has Improper Input Validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html; https://www.open-xchange.com/; https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html
CVE: CVE-2020-8544
Published: 2020-06-16
Description: OX App Suite through 7.10.3 allows SSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html; https://www.open-xchange.com/; https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html
CVE: CVE-2020-9296
Published: 2020-06-16
Description: Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-917
References: https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md; https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md
CVE: CVE-2020-9522
Published: 2020-06-16
Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03650888; https://softwaresupport.softwaregrp.com/doc/KM03650888
CVE: CVE-2020-14195
Published: 2020-06-16
Description: FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2765; https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-10268
Published: 2020-06-16
Description: Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that interfaces with the manipulator furthering the delay and increasing operational costs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-749
References: https://github.com/aliasrobotics/RVD/issues/2550; https://github.com/aliasrobotics/RVD/issues/2550
CVE: CVE-2020-14199
Published: 2020-06-16
Description: BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the Trezor One and 2.3.1 for the Trezor Model T.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd; https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd
CVE: CVE-2020-13162
Published: 2020-06-16
Description: A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: http://packetstormsecurity.com/files/158117/Pulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html; http://packetstormsecurity.com/files/159065/Pulse-Secure-Windows-Client-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2020/Jun/25
CVE: CVE-2020-7492
Published: 2020-06-16
Description: A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the discovery of the password when the user is entering the password because it is not masqueraded.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-521, CWE-521
References: https://www.se.com/ww/en/download/document/SEVD-2020-133-01/; https://www.se.com/ww/en/download/document/SEVD-2020-133-01/
CVE: CVE-2020-7493
Published: 2020-06-16
Description: A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.se.com/ww/en/download/document/SEVD-2020-133-04; https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE: CVE-2020-7494
Published: 2020-06-16
Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.se.com/ww/en/download/document/SEVD-2020-133-04; https://www.se.com/ww/en/download/document/SEVD-2020-133-04