deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24702
Published: 2021-10-18
Description: The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltred_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/30635cc9-4415-48bb-9c67-ea670ea1b942; https://wpscan.com/vulnerability/30635cc9-4415-48bb-9c67-ea670ea1b942
CVE: CVE-2021-24732
Published: 2021-10-18
Description: The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9425a9b2-e9b8-41f5-a3ca-623b6da0297c; https://wpscan.com/vulnerability/9425a9b2-e9b8-41f5-a3ca-623b6da0297c
CVE: CVE-2021-24734
Published: 2021-10-18
Description: The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fb007191-b008-4d19-b896-55fbee2a3cf7; https://wpscan.com/vulnerability/fb007191-b008-4d19-b896-55fbee2a3cf7
CVE: CVE-2021-24735
Published: 2021-10-18
Description: The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/dcbcf6e7-e5b3-498b-9f5e-7896d309441f; https://wpscan.com/vulnerability/dcbcf6e7-e5b3-498b-9f5e-7896d309441f
CVE: CVE-2021-24736
Published: 2021-10-18
Description: The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/d72275bd-0c66-4b2a-940d-d5256b5426cc; https://wpscan.com/vulnerability/d72275bd-0c66-4b2a-940d-d5256b5426cc
CVE: CVE-2021-24740
Published: 2021-10-18
Description: The Tutor LMS WordPress plugin before 1.9.9 does not escape some of its settings before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e6cf694d-c4ae-4b91-97c0-a6bdbafc7d60; https://wpscan.com/vulnerability/e6cf694d-c4ae-4b91-97c0-a6bdbafc7d60
CVE: CVE-2021-24743
Published: 2021-10-18
Description: The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/998395f0-f176-45b9-baf7-b50d30538c7d; https://wpscan.com/vulnerability/998395f0-f176-45b9-baf7-b50d30538c7d
CVE: CVE-2021-24752
Published: 2021-10-18
Description: Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284, CWE-352
References: https://wpscan.com/vulnerability/181a729e-fffe-457c-9e8d-a4343fd2e630; https://wpscan.com/vulnerability/181a729e-fffe-457c-9e8d-a4343fd2e630
CVE: CVE-2021-24754
Published: 2021-10-18
Description: The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/132118aa-4b72-4eaa-8aa1-6ad7b0c7f495; https://wpscan.com/vulnerability/132118aa-4b72-4eaa-8aa1-6ad7b0c7f495
CVE: CVE-2021-24760
Published: 2021-10-18
Description: The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/aebf821f-1724-4e4c-8d42-5a94e509d271; https://wpscan.com/vulnerability/aebf821f-1724-4e4c-8d42-5a94e509d271
CVE: CVE-2021-3755
Published: 2021-10-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-41990
Published: 2021-10-18
Description: The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf; https://github.com/strongswan/strongswan/releases/tag/5.9.4; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/
CVE: CVE-2021-41991
Published: 2021-10-18
Description: The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf; https://github.com/strongswan/strongswan/releases/tag/5.9.4; https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html
CVE: CVE-2021-42098
Published: 2021-10-18
Description: An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://devolutions.net; https://devolutions.net/security/advisories/DEVO-2021-0006; https://devolutions.net
CVE: CVE-2021-32609
Published: 2021-10-18
Description: Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread.html/r2c09254e98b4f8b3deb422762bd0e2aa6d743b72d96c2f90cbaae31a%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/r2c09254e98b4f8b3deb422762bd0e2aa6d743b72d96c2f90cbaae31a%40%3Cdev.superset.apache.org%3E
CVE: CVE-2021-41971
Published: 2021-10-18
Description: Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://lists.apache.org/thread.html/rf[PII_REDACTED]c6c6e2196ae1583e32ac[PII_REDACTED]268f8d9215e8e6d%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/rf[PII_REDACTED]c6c6e2196ae1583e32ac[PII_REDACTED]268f8d9215e8e6d%40%3Cdev.superset.apache.org%3E
CVE: CVE-2021-42575
Published: 2021-10-18
Description: The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/; https://www.oracle.com/security-alerts/cpujan2022.html; https://www.oracle.com/security-alerts/cpujul2022.html
CVE: CVE-2021-42576
Published: 2021-10-18
Description: The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/; https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/
CVE: CVE-2021-23449
Published: 2021-10-18
Description: This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/patriksimek/vm2/commit/b4f6e2bd2c4a1ef52fc4483d8e35f28bc4481886; https://github.com/patriksimek/vm2/issues/363; https://github.com/patriksimek/vm2/releases/tag/3.9.4
CVE: CVE-2021-29878
Published: 2021-10-18
Description: IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 206581.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206581; https://www.ibm.com/support/pages/node/6501949; https://exchange.xforce.ibmcloud.com/vulnerabilities/206581
CVE: CVE-2021-36513
Published: 2021-10-18
Description: An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-909
References: https://github.com/signalwire/freeswitch/issues/1245; https://github.com/signalwire/freeswitch/releases/tag/v1.10.6; https://newreleases.io/project/github/signalwire/freeswitch/release/v1.10.6
CVE: CVE-2021-42055
Published: 2021-10-18
Description: ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-276
References: https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/; https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/
CVE: CVE-2021-41151
Published: 2021-10-18
Description: Backstage is an open platform for building developer portals. In affected versions A malicious actor could read sensitive files from the environment where Scaffolder Tasks are run. The attack is executed by crafting a custom Scaffolder template with a `github:publish:pull-request` action and a particular source path. When the template is executed the sensitive files would be included in the published pull request. This vulnerability is mitigated by the fact that an attacker would need access to create and register templates in the Backstage catalog, and that the attack is very visible given that the exfiltration happens via a pull request. The vulnerability is patched in the `0.15.9` release of `@backstage/plugin-scaffolder-backend`.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/backstage/backstage/commit/6968962c920508eae19a4c1c200fa2c8980a4006; https://github.com/backstage/backstage/security/advisories/GHSA-pvv8-8fx9-h673; https://github.com/backstage/backstage/commit/6968962c920508eae19a4c1c200fa2c8980a4006
CVE: CVE-2021-41152
Published: 2021-10-18
Description: OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere on the target system. The attack could be used to read any file accessible in the web root folder or outside, depending on the configuration of the system and the properly configured permission of the application server user. The attack requires an OpenOlat user account or the enabled guest user feature together with the usage of the folder component in a course. The attack does not allow writing of arbitrary files, it allows only reading of files and also only ready of files that the attacker knows the exact path which is very unlikely at least for OpenOlat data files. The problem is fixed in version 15.5.8 and 16.0.1 It is advised to upgrade to version 16.0.x. There are no known workarounds to fix this problem, an upgrade is necessary.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-23, CWE-22
References: https://github.com/OpenOLAT/OpenOLAT/commit/418bb509ffcb0e25ab4390563c6c47f0458583eb; https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-m8j5-837g-2p3f; https://jira.openolat.org/browse/OO-5696
CVE: CVE-2021-41153
Published: 2021-10-18
Description: The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In `evm` crate `< 0.31.0`, `JUMPI` opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should happen before the destination validity check. This is a **high** severity security advisory if you use `evm` crate for Ethereum mainnet. In this case, you should update your library dependency immediately to on or after `0.31.0`. This is a **low** severity security advisory if you use `evm` crate in Frontier or in a standalone blockchain, because there's no security exploit possible with this advisory. It is **not** recommended to update to on or after `0.31.0` until all the normal chain upgrade preparations have been done. If you use Frontier or other `pallet-evm` based Substrate blockchain, please ensure to update your `spec_version` before updating this. For other blockchains, please make sure to follow a hard-fork process before you update this.
CVSS Score: 8.7 (HIGH)
CWE: CWE-670, CWE-670
References: https://github.com/rust-blockchain/evm/pull/67; https://github.com/rust-blockchain/evm/security/advisories/GHSA-pvh2-pj76-4m96; https://github.com/rust-blockchain/evm/pull/67
CVE: CVE-2021-41156
Published: 2021-10-18
Description: anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browser_today hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craft an html form with malicious JavaScript, use social engineering to convince logged on users to execute a POST from such form, and have the attacker-supplied JavaScript to be executed in user's browser. This has been patched in version 1.19.30.5600. Upgrade is recommended. If it is not practical, introduce ttValidDbDateFormatDate function as in the latest version and add a call to it within the access checks block.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/anuko/timetracker/security/advisories/GHSA-g9cc-m4p4-6xpc; https://github.com/anuko/timetracker/security/advisories/GHSA-g9cc-m4p4-6xpc
CVE: CVE-2021-42650
Published: 2021-10-18
Description: Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/portainer/portainer/pull/5766; https://github.com/purple-WL/Security-vulnerability/blob/main/Portainer%20Custom%20Templates%20xss; https://github.com/portainer/portainer/pull/5766
CVE: CVE-2021-41154
Published: 2021-10-18
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tuleap Community Edition 11.17.99.144, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Enalean/tuleap/commit/ab12b686ced4cf233d3b15b08da008e0553eb6a6; https://github.com/Enalean/tuleap/security/advisories/GHSA-6462-gfv9-jf83; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ab12b686ced4cf233d3b15b08da008e0553eb6a6
CVE: CVE-2021-41155
Published: 2021-10-18
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not sanitize properly user inputs when constructing the SQL query to browse and search revisions in the CVS repositories. The following versions contain the fix: Tuleap Community Edition 11.17.99.146, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Enalean/tuleap/commit/ff75f2899c60a4546ee2d532e68a3febd07bdd14; https://github.com/Enalean/tuleap/security/advisories/GHSA-f8jp-hx4q-wxvr; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ff75f2899c60a4546ee2d532e68a3febd07bdd14
CVE: CVE-2021-20836
Published: 2021-10-19
Description: Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://jvn.jp/en/vu/JVNVU90041391/index.html; https://www.myomron.com/index.php?action=kb&article=1692; https://jvn.jp/en/vu/JVNVU90041391/index.html
CVE: CVE-2021-25968
Published: 2021-10-19
Description: In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim’s browser when they open the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/alkacon/mercury-template/commit/800945f5d02346c633c7aef9f5d596d7dedc8fb5; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25968; https://github.com/alkacon/mercury-template/commit/800945f5d02346c633c7aef9f5d596d7dedc8fb5
CVE: CVE-2021-36512
Published: 2021-10-19
Description: An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers to view sensitive information due to an uninitialized value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: http://synchronet.com; https://gitlab.synchro.net/main/sbbs/-/issues/276; http://synchronet.com
CVE: CVE-2021-42261
Published: 2021-10-19
Description: Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of sensitive data on the vulnerable server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/jet-pentest/CVE-2021-42261; https://revisorlab.com/; https://github.com/jet-pentest/CVE-2021-42261
CVE: CVE-2021-38462
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521, CWE-521
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38464
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-326, CWE-326
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38466
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38468
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to the system.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38470
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38472
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending a link to an administrator that frames the router’s management portal and could lure the administrator to perform changes.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38474
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and without harming the normal operation of the user. This could allow an attacker to gain valid credentials for the product interface.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-307, CWE-307
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38476
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05