deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-3617
Published: 2020-06-10
Description: Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS103052; http://service.mcafee.com/FAQDocument.aspx?&id=TS103052
CVE: CVE-2019-3613
Published: 2020-06-10
Description: DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10320; https://kc.mcafee.com/corporate/index?page=content&id=SB10320
CVE: CVE-2019-3585
Published: 2020-06-10
Description: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269, CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10302; https://kc.mcafee.com/corporate/index?page=content&id=SB10302
CVE: CVE-2019-3588
Published: 2020-06-10
Description: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10302; https://kc.mcafee.com/corporate/index?page=content&id=SB10302
CVE: CVE-2020-7279
Published: 2020-06-10
Description: DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-426, CWE-426
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10320; https://kc.mcafee.com/corporate/index?page=content&id=SB10320
CVE: CVE-2020-7280
Published: 2020-06-10
Description: Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10302; https://www.zerodayinitiative.com/advisories/ZDI-20-702/; https://kc.mcafee.com/corporate/index?page=content&id=SB10302
CVE: CVE-2019-4576
Published: 2020-06-10
Description: IBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 166803.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/166803; https://www.ibm.com/support/pages/node/6221298; https://exchange.xforce.ibmcloud.com/vulnerabilities/166803
CVE: CVE-2020-4432
Published: 2020-06-10
Description: Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/180810; https://www.ibm.com/support/pages/node/6221324; https://exchange.xforce.ibmcloud.com/vulnerabilities/180810
CVE: CVE-2020-4433
Published: 2020-06-10
Description: Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/180814; https://www.ibm.com/support/pages/node/6221324; https://exchange.xforce.ibmcloud.com/vulnerabilities/180814
CVE: CVE-2020-4434
Published: 2020-06-10
Description: Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/180900; https://www.ibm.com/support/pages/node/6221324; https://exchange.xforce.ibmcloud.com/vulnerabilities/180900
CVE: CVE-2020-4435
Published: 2020-06-10
Description: Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/180901; https://www.ibm.com/support/pages/node/6221324; https://exchange.xforce.ibmcloud.com/vulnerabilities/180901
CVE: CVE-2020-4436
Published: 2020-06-10
Description: Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/180902; https://www.ibm.com/support/pages/node/6221324; https://exchange.xforce.ibmcloud.com/vulnerabilities/180902
CVE: CVE-2020-6239
Published: 2020-06-10
Description: Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-522
References: https://launchpad.support.sap.com/#/notes/2908382; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2908382
CVE: CVE-2020-6246
Published: 2020-06-10
Description: SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2878935; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2878935
CVE: CVE-2020-6260
Published: 2020-06-10
Description: SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-91
References: https://launchpad.support.sap.com/#/notes/2915126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2915126
CVE: CVE-2020-6263
Published: 2020-06-10
Description: Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for operations that require user identity leading to Authentication Bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2878568; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2878568
CVE: CVE-2020-6264
Published: 2020-06-10
Description: SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure.
CVSS Score: 7.5 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2906366; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2906366
CVE: CVE-2020-6266
Published: 2020-06-10
Description: SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/2911687; https://launchpad.support.sap.com/#/notes/2911704; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775
CVE: CVE-2020-6268
Published: 2020-06-10
Description: Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain restricted data leading to Missing Authorization Check.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2906996; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2906996
CVE: CVE-2020-6269
Published: 2020-06-10
Description: Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2905836; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2905836
CVE: CVE-2020-6270
Published: 2020-06-10
Description: SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2916562; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2916562
CVE: CVE-2020-6271
Published: 2020-06-10
Description: SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the system to crash and read restricted data (files visible for technical administration users of the diagnostics agent).
CVSS Score: 8.2 (HIGH)
CWE: CWE-91
References: https://launchpad.support.sap.com/#/notes/2931391; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2931391
CVE: CVE-2020-6275
Published: 2020-06-10
Description: SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path names containing malicious server names in the import/export of sessions functionality and coerce the web server into authenticating with the malicious server. Furthermore, if NTLM is setup the attacker can compromise confidentiality, integrity and availability of the SAP database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://launchpad.support.sap.com/#/notes/2912939; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775; https://launchpad.support.sap.com/#/notes/2912939
CVE: CVE-2020-6279
Published: 2020-06-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-10708
Published: 2020-06-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-13267
Published: 2020-06-10
Description: A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13267.json; https://gitlab.com/gitlab-org/gitlab/-/issues/211956; https://hackerone.com/reports/824773
CVE: CVE-2020-13268
Published: 2020-06-10
Description: A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and later through 13.0.1
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13268.json; https://gitlab.com/gitlab-org/gitlab/-/issues/214220; https://hackerone.com/reports/848415
CVE: CVE-2020-13269
Published: 2020-06-10
Description: A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13269.json; https://gitlab.com/gitlab-org/gitlab/-/issues/216528; https://hackerone.com/reports/864356
CVE: CVE-2020-13270
Published: 2020-06-10
Description: Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13270.json; https://gitlab.com/gitlab-org/gitlab/-/issues/24648; https://hackerone.com/reports/419977
CVE: CVE-2020-13271
Published: 2020-06-10
Description: A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13271.json; https://gitlab.com/gitlab-org/gitlab/-/issues/200094; https://hackerone.com/reports/672150
CVE: CVE-2020-7670
Published: 2020-06-10
Description: agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130; https://github.com/ohler55/agoo/issues/88; https://snyk.io/vuln/SNYK-RUBY-AGOO-569137
CVE: CVE-2020-7671
Published: 2020-06-10
Description: goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as valid which could be leveraged for TE:CL smuggling attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://github.com/postrank-labs/goliath/issues/351%2C; https://snyk.io/vuln/SNYK-RUBY-GOLIATH-569136; https://github.com/postrank-labs/goliath/issues/351%2C
CVE: CVE-2020-7672
Published: 2020-06-10
Description: mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed by the `eval` function, resulting in code execution.
CVSS Score: 8.6 (HIGH)
CWE: CWE-94
References: https://snyk.io/vuln/SNYK-JS-MOSC-571492; https://snyk.io/vuln/SNYK-JS-MOSC-571492
CVE: CVE-2020-7673
Published: 2020-06-10
Description: node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://snyk.io/vuln/SNYK-JS-NODEEXTEND-571491; https://snyk.io/vuln/SNYK-JS-NODEEXTEND-571491
CVE: CVE-2020-7674
Published: 2020-06-10
Description: access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function is executed by the `eval` function resulting in code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://snyk.io/vuln/SNYK-JS-ACCESSPOLICY-571490; https://snyk.io/vuln/SNYK-JS-ACCESSPOLICY-571490
CVE: CVE-2020-7675
Published: 2020-06-10
Description: cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument executed by the `eval` function resulting in code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://snyk.io/vuln/SNYK-JS-CDMESSENGER-571493; https://snyk.io/vuln/SNYK-JS-CDMESSENGER-571493
CVE: CVE-2020-10755
Published: 2020-06-10
Description: An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. Source: OpenStack project
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10755; https://usn.ubuntu.com/4420-1/; https://wiki.openstack.org/wiki/OSSN/OSSN-0086
CVE: CVE-2020-7580
Published: 2020-06-10
Description: A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-20-161-04; https://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf
CVE: CVE-2020-7585
Published: 2020-06-10
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://cert-portal.siemens.com/productcert/pdf/ssa-689942.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-20-161-05; https://www.us-cert.gov/ics/advisories/icsa-20-161-05
CVE: CVE-2020-7586
Published: 2020-06-10
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-689942.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-20-161-05; https://www.us-cert.gov/ics/advisories/icsa-20-161-05
CVE: CVE-2020-7589
Published: 2020-06-10
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 135/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-817401.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-161-03; https://cert-portal.siemens.com/productcert/pdf/ssa-817401.pdf
CVE: CVE-2019-5731
Published: 2020-06-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-5732
Published: 2020-06-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none