deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10985
Published: 2019-09-17
Description: The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0x62626262.wordpress.com/2016/04/21/echosign-plugin-for-wordpress-xss-vulnerability/; https://wordpress.org/plugins/echosign/#developers; https://wpvulndb.com/vulnerabilities/8465
CVE: CVE-2016-10986
Published: 2019-09-17
Description: The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0x62626262.wordpress.com/2016/04/21/tweet-wheel-xss-vulnerability/; https://wordpress.org/plugins/tweet-wheel/#developers; https://wpvulndb.com/vulnerabilities/8464
CVE: CVE-2016-10987
Published: 2019-09-17
Description: The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0x62626262.wordpress.com/2016/04/21/persian-woocommerce-sms-xss-vulnerability/; https://wordpress.org/plugins/persian-woocommerce-sms/#developers; https://wpvulndb.com/vulnerabilities/8463
CVE: CVE-2016-10988
Published: 2019-09-17
Description: The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/leenkme/#developers; https://wpvulndb.com/vulnerabilities/8457; https://www.openwall.com/lists/oss-security/2016/04/16/4
CVE: CVE-2016-10989
Published: 2019-09-17
Description: The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/leenkme/#developers; https://wpvulndb.com/vulnerabilities/8457; https://www.openwall.com/lists/oss-security/2016/04/16/4
CVE: CVE-2016-10990
Published: 2019-09-17
Description: The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-cerber/#developers; https://wpvulndb.com/vulnerabilities/8430; https://wordpress.org/plugins/wp-cerber/#developers
CVE: CVE-2016-10991
Published: 2019-09-17
Description: The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://wordpress.org/plugins/imdb-widget/#developers; https://wpvulndb.com/vulnerabilities/8426; https://wordpress.org/plugins/imdb-widget/#developers
CVE: CVE-2016-10992
Published: 2019-09-17
Description: The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/136445/; https://wordpress.org/plugins/music-store/#developers; https://wpvulndb.com/vulnerabilities/8429
CVE: CVE-2016-10993
Published: 2019-09-17
Description: The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/8431; https://www.vulnerability-lab.com/get_content.php?id=1808; https://wpvulndb.com/vulnerabilities/8431
CVE: CVE-2019-11559
Published: 2019-09-17
Description: A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Sep/28; https://twitter.com/gpheheise/status/[PII_REDACTED]69519105?s=21; http://seclists.org/fulldisclosure/2019/Sep/28
CVE: CVE-2019-15729
Published: 2019-09-17
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/62073; https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/
CVE: CVE-2018-20336
Published: 2019-09-17
Description: An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string over UDP, which may lead to an information leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://starlabs.sg/advisories/18-20336/; https://www.asus.com/Networking/RT-AC1200G-plus/HelpDesk_BIOS/; https://starlabs.sg/advisories/18-20336/
CVE: CVE-2019-12755
Published: 2019-09-17
Description: Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.symantec.com/us/en/article.SYMSA1493.html; https://support.symantec.com/us/en/article.SYMSA1493.html
CVE: CVE-2019-14826
Published: 2019-09-17
Description: A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826
CVE: CVE-2019-14835
Published: 2019-09-17
Description: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://packetstormsecurity.com/files/154572/Kernel-Live-Patch-Security-Notice-LSN-0056-1.html
CVE: CVE-2019-9009
Published: 2019-09-17
Description: An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12941&token=50fabe3870c7bdc41701eb1799dddeec103de40c&download=; https://www.us-cert.gov/ics/advisories/icsa-19-255-05; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12941&token=50fabe3870c7bdc41701eb1799dddeec103de40c&download=
CVE: CVE-2019-9681
Published: 2019-09-17
Description: Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: https://www.dahuasecurity.com/support/cybersecurity/details/637; https://www.dahuasecurity.com/support/cybersecurity/details/637
CVE: CVE-2019-11667
Published: 2019-09-17
Description: Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to private data.
CVSS Score: 7.5 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03517346; https://softwaresupport.softwaregrp.com/doc/KM03517346
CVE: CVE-2019-11666
Published: 2019-09-17
Description: Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-13542
Published: 2019-09-17
Description: 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://www.us-cert.gov/ics/advisories/icsa-19-255-04; https://www.us-cert.gov/ics/advisories/icsa-19-255-04
CVE: CVE-2019-4086
Published: 2019-09-17
Description: IBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 157509.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/157509; https://www.ibm.com/support/pages/security-bulletin-ibm-application-performance-management-could-allow-remote-attacker-hijack-clicking-action-victim-cve-2019-4086; https://exchange.xforce.ibmcloud.com/vulnerabilities/157509
CVE: CVE-2019-4171
Published: 2019-09-17
Description: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 158876.
CVSS Score: 3.7 (LOW)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158876; https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller; https://exchange.xforce.ibmcloud.com/vulnerabilities/158876
CVE: CVE-2019-4175
Published: 2019-09-17
Description: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158880.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158880; https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller; https://exchange.xforce.ibmcloud.com/vulnerabilities/158880
CVE: CVE-2019-4183
Published: 2019-09-17
Description: IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158973; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/1073530
CVE: CVE-2019-4268
Published: 2019-09-17
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160201; https://www.ibm.com/support/pages/node/884030; https://exchange.xforce.ibmcloud.com/vulnerabilities/160201
CVE: CVE-2019-4270
Published: 2019-09-17
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160203.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160203; https://www.ibm.com/support/pages/node/884036; https://exchange.xforce.ibmcloud.com/vulnerabilities/160203
CVE: CVE-2019-4271
Published: 2019-09-17
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160243; https://www.ibm.com/support/pages/node/884040; https://exchange.xforce.ibmcloud.com/vulnerabilities/160243
CVE: CVE-2019-4342
Published: 2019-09-17
Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 161421.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161421; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/1073530
CVE: CVE-2019-4442
Published: 2019-09-17
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content. IBM X-Force ID: 163226.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/163226; https://www.ibm.com/support/pages/node/959021; https://exchange.xforce.ibmcloud.com/vulnerabilities/163226
CVE: CVE-2019-4477
Published: 2019-09-17
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/163997; https://www.ibm.com/support/pages/node/960290; https://exchange.xforce.ibmcloud.com/vulnerabilities/163997
CVE: CVE-2018-7820
Published: 2019-09-17
Description: A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255, CWE-522
References: https://www.apc.com/salestools/CCON-BFQMXC/CCON-BFQMXC_R0_EN.pdf; https://www.apc.com/salestools/CCON-BFQMXC/CCON-BFQMXC_R0_EN.pdf
CVE: CVE-2019-11665
Published: 2019-09-17
Description: Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.
CVSS Score: 7.5 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-13538
Published: 2019-09-17
Description: 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102f; https://www.us-cert.gov/ics/advisories/icsa-19-255-02; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102f
CVE: CVE-2019-6809
Published: 2019-09-17
Description: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-755
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/; https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE: CVE-2019-6810
Published: 2019-09-17
Description: CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/; https://security.cse.iitk.ac.in/responsible-disclosure
CVE: CVE-2019-6811
Published: 2019-09-17
Description: An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-253-02/; https://www.schneider-electric.com/en/download/document/SEVD-2019-253-02/
CVE: CVE-2019-6813
Published: 2019-09-17
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-02/; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/
CVE: CVE-2019-6826
Published: 2019-09-17
Description: A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-225-04/; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-04/
CVE: CVE-2019-6828
Published: 2019-09-17
Description: A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-755
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/; https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE: CVE-2019-6829
Published: 2019-09-17
Description: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-755
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/; https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE: CVE-2019-6830
Published: 2019-09-17
Description: A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-248, CWE-755
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/; https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
CVE: CVE-2019-6831
Published: 2019-09-17
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on port 2404/TCP.
CVSS Score: 8.6 (HIGH)
CWE: CWE-754, CWE-754
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/; https://security.cse.iitk.ac.in/responsible-disclosure
CVE: CVE-2019-6832
Published: 2019-09-17
Description: A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control when an attacker bypasses the authentication.
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-225-07/; https://www.schneider-electric.com/en/download/document/SEVD-2019-225-07/
CVE: CVE-2019-6833
Published: 2019-09-17
Description: A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01; https://security.cse.iitk.ac.in/responsible-disclosure
CVE: CVE-2019-6835
Published: 2019-09-17
Description: A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01
CVE: CVE-2019-6836
Published: 2019-09-17
Description: A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://www.se.com/ww/en/download/document/SEVD-2019-253-01/; https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE: CVE-2019-6837
Published: 2019-09-17
Description: A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01