deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10722
Published: 2018-05-02
Description: partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-overflow/; https://github.com/Thomas-Tsai/partclone/issues/71; https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-overflow/
CVE: CVE-2018-10666
Published: 2018-05-03
Description: The Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables.
CVSS Score: 7.5 (HIGH)
References: https://medium.com/%40jonghyk.song/aurora-idex-membership-idxm-erc20-token-allows-attackers-to-acquire-contract-ownership-1ff426cee7c6; https://medium.com/%40jonghyk.song/aurora-idex-membership-idxm-erc20-token-allows-attackers-to-acquire-contract-ownership-1ff426cee7c6
CVE: CVE-2018-10689
Published: 2018-05-03
Description: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.dk/?p=blktrace.git%3Ba=log%3Bh=d61ff409cb4dda31386373d706ea0cfb1aaac5b7; http://www.securityfocus.com/bid/104142; https://access.redhat.com/errata/RHSA-2019:2162
CVE: CVE-2018-4849
Published: 2018-05-03
Description: A vulnerability has been identified in Siveillance VMS Video for Android (All versions < V12.1a (2018 R1)), Siveillance VMS Video for iOS (All versions < V12.1a (2018 R1)). Improper certificate validation could allow an attacker in a privileged network position to read data from and write data to the encrypted communication channel between the app and a server. The security vulnerability could be exploited by an attacker in a privileged network position which allows intercepting the communication channel between the affected app and a server (such as Man-in-the-Middle). Furthermore, an attacker must be able to generate a certificate that results for the validation algorithm in a checksum identical to a trusted certificate. Successful exploitation requires no user interaction. The vulnerability could allow reading data from and writing data to the encrypted communication channel between the app and a server, impacting the communication's confidentiality and integrity. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/104105; https://cert-portal.siemens.com/productcert/pdf/ssa-468514.pdf; http://www.securityfocus.com/bid/104105
CVE: CVE-2018-10713
Published: 2018-05-03
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'read <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU; https://github.com/kgsdy/D-Link-DSL-3782-EU
CVE: CVE-2018-10716
Published: 2018-05-03
Description: An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WM_CLOSE is not properly considered.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/rebol0x6c/2345_msg_poc; https://github.com/rebol0x6c/2345_msg_poc
CVE: CVE-2018-10717
Published: 2018-05-03
Description: The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file, a different vulnerability than CVE-2018-10677.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/miniupnp/ngiflib/commit/cf429e0a2fe26b5f01ce0c8e9b79432e94509b6e; https://github.com/miniupnp/ngiflib/issues/3; https://github.com/miniupnp/ngiflib/commit/cf429e0a2fe26b5f01ce0c8e9b79432e94509b6e
CVE: CVE-2018-10164
Published: 2018-05-03
Description: Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version 2.6.1_Windows.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104094; https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilities; http://www.securityfocus.com/bid/104094
CVE: CVE-2018-10165
Published: 2018-05-03
Description: Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in the local user creation functionality. This is fixed in version 2.6.1_Windows.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104094; https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilities; http://www.securityfocus.com/bid/104094
CVE: CVE-2018-10166
Published: 2018-05-03
Description: The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any forms. This would allow an attacker to submit authenticated requests when an authenticated user browses an attack-controlled domain. This is fixed in version 2.6.1_Windows.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/104094; https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilities; http://www.securityfocus.com/bid/104094
CVE: CVE-2018-10167
Published: 2018-05-03
Description: The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. A low-privilege user could decrypt and modify the backup file in order to elevate their privileges. This is fixed in version 2.6.1_Windows.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/104094; https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilities; http://www.securityfocus.com/bid/104094
CVE: CVE-2018-10168
Published: 2018-05-03
Description: TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1_Windows.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/104094; https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilities; http://www.securityfocus.com/bid/104094
CVE: CVE-2018-10718
Published: 2018-05-03
Description: Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: https://github.com/momo5502/cod-exploit; https://momo5502.com/blog/?p=34; https://www.exploit-db.com/exploits/44987/
CVE: CVE-2018-8003
Published: 2018-05-03
Description: Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is running as. Direct network access to the Ambari Server is required to issue this request, and those Ambari Servers that are protected behind a firewall, or in a restricted network zone are at less risk of being affected by this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/104161; https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-CVE-2018-8003; http://www.securityfocus.com/bid/104161
CVE: CVE-2018-10722
Published: 2018-05-04
Description: In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink chain to a pathname of an arbitrary DLL that CyUpdate uses.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://www.atredis.com/blog/cylance-privilege-escalation-vulnerability; https://www.atredis.com/blog/cylance-privilege-escalation-vulnerability
CVE: CVE-2018-10561
Published: 2018-05-04
Description: An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/107053; https://www.exploit-db.com/exploits/44576/; https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
CVE: CVE-2018-10562
Published: 2018-05-04
Description: An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/107053; https://www.exploit-db.com/exploits/44576/; https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
CVE: CVE-2018-10641
Published: 2018-05-04
Description: D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://advancedpersistentsecurity.net/cve-2018-10641/; https://gist.github.com/jocephus/806ff4679cf54af130d69777a551f819; https://www.peerlyst.com/posts/vulnerability-disclosure-insecure-authentication-practices-in-d-link-router-cve-2018-10641-joe-gray
CVE: CVE-2017-1743
Published: 2018-05-04
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22013601; http://www.securityfocus.com/bid/104134; http://www.securitytracker.com/id/1040890
CVE: CVE-2017-7176
Published: 2018-05-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-10726
Published: 2018-05-04
Description: A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/datenstrom/yellow/issues/321; https://github.com/datenstrom/yellow/issues/321
CVE: CVE-2017-3775
Published: 2018-05-04
Description: Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: https://support.lenovo.com/us/en/solutions/LEN-20241; https://support.lenovo.com/us/en/solutions/LEN-20241
CVE: CVE-2018-10733
Published: 2018-05-04
Description: There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.html; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3140
CVE: CVE-2018-10739
Published: 2018-05-04
Description: An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe allows local users to bypass intended process protections, and consequently terminate process, because WM_SYSCOMMAND is not properly considered.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/rebol0x6c/2345_wm_syscommand; https://github.com/rebol0x6c/2345_wm_syscommand
CVE: CVE-2018-7522
Published: 2018-05-04
Description: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103947; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02; https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/
CVE: CVE-2018-8853
Published: 2018-05-04
Description: Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots by default with elevated Windows privileges, enabling a kiosk application, user, or an attacker to potentially attain unauthorized elevated privileges in Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior. Also, attackers may gain access to unauthorized resources from the underlying Windows operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-269
References: http://www.securityfocus.com/bid/104088; https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8857
Published: 2018-05-04
Description: Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. An attacker could compromise these credentials and gain access to the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/104088; https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8861
Published: 2018-05-04
Description: Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior) could enable a limited-access kiosk user or an unauthorized attacker to break-out from the containment of the kiosk environment, attain elevated privileges from the underlying Windows OS, and access unauthorized resources from the operating system.
CVSS Score: 8.7 (HIGH)
CWE: CWE-668
References: http://www.securityfocus.com/bid/104088; https://ics-cert.us-cert.gov/advisories/ICSMA-18-123-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8865
Published: 2018-05-04
Description: In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/104098; https://ics-cert.us-cert.gov/advisories/ICSA-18-123-01; http://www.securityfocus.com/bid/104098
CVE: CVE-2018-8869
Published: 2018-05-04
Description: In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/104098; https://ics-cert.us-cert.gov/advisories/ICSA-18-123-01; http://www.securityfocus.com/bid/104098
CVE: CVE-2018-8872
Published: 2018-05-04
Description: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/103947; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02; https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/
CVE: CVE-2018-9063
Published: 2018-05-04
Description: MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104125; https://support.lenovo.com/us/en/solutions/LEN-19625; http://www.securityfocus.com/bid/104125
CVE: CVE-2018-10740
Published: 2018-05-04
Description: Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/axublog/axublog/issues/1; https://github.com/axublog/axublog/issues/1
CVE: CVE-2018-10746
Published: 2018-05-04
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/get.md; https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/get.md
CVE: CVE-2018-10747
Published: 2018-05-04
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'unset <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/unset.md; https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/unset.md
CVE: CVE-2018-10748
Published: 2018-05-04
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'show <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/show.md; https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/show.md
CVE: CVE-2018-10749
Published: 2018-05-04
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'commit <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/commit.md; https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/commit.md
CVE: CVE-2018-10750
Published: 2018-05-04
Description: An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'staticGet <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/staticGet.md; https://github.com/kgsdy/D-Link-DSL-3782-EU/blob/master/staticGet.md
CVE: CVE-2018-5446
Published: 2018-05-04
Description: Medtronic 2090 CareLink Programmer 

uses a per-product username and password that is stored in a recoverable format.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-257, CWE-522
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01
CVE: CVE-2018-5448
Published: 2018-05-04
Description: Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01
CVE: CVE-2018-7494
Published: 2018-05-04
Description: WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/103179; https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02; http://www.securityfocus.com/bid/103179
CVE: CVE-2018-7507
Published: 2018-05-04
Description: WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/103179; https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02; http://www.securityfocus.com/bid/103179