deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24726
Published: 2021-09-13
Description: The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/f85b6033-d7c1-45b7-b3b0-8967f7373bb8; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29176; https://wpscan.com/vulnerability/f85b6033-d7c1-45b7-b3b0-8967f7373bb8
CVE: CVE-2021-24727
Published: 2021-09-13
Description: The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2576276/; https://wpscan.com/vulnerability/ffa1f718-f2c5-48ef-8eea-33a18a628a2c; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29174
CVE: CVE-2021-24728
Published: 2021-09-13
Description: The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using them in SQL statement, leading to Authenticated SQL Injections in the Members and Payments pages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/2566399/paid-member-subscriptions; https://wpscan.com/vulnerability/2277d335-1c90-4fa8-b0bf-25873c039c38; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29172
CVE: CVE-2021-33543
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33544
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33545
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33546
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33547
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33548
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33549
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/
CVE: CVE-2021-33550
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33551
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33552
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33553
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-33554
Published: 2021-09-13
Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03; https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/; https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE: CVE-2021-39212
Published: 2021-09-13
Description: ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded by a `module` policy in `policy.xml`. ex. <policy domain="module" rights="none" pattern="PS" />. The issue has been resolved in ImageMagick 7.1.0-7 and in 6.9.12-22. Fortunately, in the wild, few users utilize the `module` policy and instead use the `coder` policy that is also our workaround recommendation: <policy domain="coder" rights="none" pattern="{PS,EPI,EPS,EPSF,EPSI}" />.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-668, CWE-362
References: https://github.com/ImageMagick/ImageMagick/commit/01faddbe2711a4156180c4a92837e2f23683cc68; https://github.com/ImageMagick/ImageMagick/commit/35893e7cad78ce461fcaffa56076c11700ba5e4e; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr
CVE: CVE-2021-3666
Published: 2021-09-13
Description: body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63; https://huntr.dev/bounties/1-other-fiznool/body-parser-xml; https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63
CVE: CVE-2021-33362
Published: 2021-09-13
Description: Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/1273cdc706eeedf8346d4b9faa5b[PII_REDACTED]1d; https://github.com/gpac/gpac/issues/1780; https://github.com/gpac/gpac/commit/1273cdc706eeedf8346d4b9faa5b[PII_REDACTED]1d
CVE: CVE-2021-33364
Published: 2021-09-13
Description: Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7; https://github.com/gpac/gpac/issues/1783; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-33366
Published: 2021-09-13
Description: Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/0a85029d694f992f3631e2f249e4999daee15cbf; https://github.com/gpac/gpac/issues/1785; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-38833
Published: 2021-09-13
Description: SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833; https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/; https://streamable.com/ojobew
CVE: CVE-2021-40823
Published: 2021-09-13
Description: A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating in that room. This allows the homeserver to decrypt end-to-end encrypted messages sent by affected clients.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-290
References: https://github.com/matrix-org/matrix-js-sdk/releases/tag/v12.4.1; https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing; https://github.com/matrix-org/matrix-js-sdk/releases/tag/v12.4.1
CVE: CVE-2021-40824
Published: 2021-09-13
Description: A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating in that room. This allows the attacker to decrypt end-to-end encrypted messages sent by affected clients.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-290
References: https://github.com/matrix-org/matrix-android-sdk2/releases/tag/v1.2.2; https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing; https://github.com/matrix-org/matrix-android-sdk2/releases/tag/v1.2.2
CVE: CVE-2021-32138
Published: 2021-09-13
Description: The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/289ffce3e0d224d314f5f92a744d5fe35999f20b; https://github.com/gpac/gpac/issues/1767; https://github.com/gpac/gpac/commit/289ffce3e0d224d314f5f92a744d5fe35999f20b
CVE: CVE-2021-32139
Published: 2021-09-13
Description: The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/d527325a9b[PII_REDACTED]5a534a508f9e1753f76e; https://github.com/gpac/gpac/issues/1768; https://github.com/gpac/gpac/commit/d527325a9b[PII_REDACTED]5a534a508f9e1753f76e
CVE: CVE-2021-33361
Published: 2021-09-13
Description: Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/a51f951b878c2b73c1d8e2f1518c7cdc5fb82c3f; https://github.com/gpac/gpac/issues/1782; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-33363
Published: 2021-09-13
Description: Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/ec64c7b8966d7e4642d12debb888be5acf18efb9; https://github.com/gpac/gpac/issues/1786; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-33365
Published: 2021-09-13
Description: Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/984787de3d414a5f7d43d0b4584d9469dff2a5a5; https://github.com/gpac/gpac/issues/1784; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-41033
Published: 2021-09-13
Description: In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HTTP; that can then be exploited to serve incorrect p2 metadata and entirely alter the local installation, particularly by installing plug-ins that may then run malicious code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-300
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=575688; https://bugs.eclipse.org/bugs/show_bug.cgi?id=575688
CVE: CVE-2021-41054
Published: 2021-09-13
Description: tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41054; https://lists.debian.org/debian-lts-announce/2021/11/msg00014.html; https://sourceforge.net/p/atftp/code/ci/d255bf90834fb45be52decf9bc0b4fb46c90f205/
CVE: CVE-2020-20670
Published: 2021-09-13
Description: An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/yilezhu/Czar.Cms/issues/6; https://github.com/yilezhu/Czar.Cms/issues/6
CVE: CVE-2020-20671
Published: 2021-09-13
Description: A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Kitesky/KiteCMS/issues/3; https://github.com/Kitesky/KiteCMS/issues/3
CVE: CVE-2020-20672
Published: 2021-09-13
Description: An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/Kitesky/KiteCMS/issues/3; https://github.com/Kitesky/KiteCMS/issues/3
CVE: CVE-2021-41072
Published: 2021-09-14
Description: squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create the symbolic link pointing outside the expected directory, and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-59
References: https://github.com/plougher/squashfs-tools/commit/e0485802ec72996c20026da320650d8362f555bd; https://github.com/plougher/squashfs-tools/issues/72#issuecomment-913833405; https://lists.debian.org/debian-lts-announce/2021/10/msg00017.html
CVE: CVE-2019-20101
Published: 2021-09-14
Description: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1.
CVSS Score: 5.3 (MEDIUM)
References: https://ecosystem.atlassian.net/browse/AW-20; https://jira.atlassian.com/browse/JRASERVER-72618; https://ecosystem.atlassian.net/browse/AW-20
CVE: CVE-2021-39118
Published: 2021-09-14
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the /rest/api/1.0/render endpoint. The affected versions are before version 8.19.0.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-72736; https://jira.atlassian.com/browse/JRASERVER-72736
CVE: CVE-2021-39123
Published: 2021-09-14
Description: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0.
CVSS Score: 7.5 (HIGH)
References: https://jira.atlassian.com/browse/JRASERVER-72237; https://jira.atlassian.com/browse/JRASERVER-72237
CVE: CVE-2021-39124
Published: 2021-09-14
Description: The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-72761; https://jira.atlassian.com/browse/JRASERVER-72761
CVE: CVE-2021-39125
Published: 2021-09-14
Description: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability in the password reset page. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-72009; https://jira.atlassian.com/browse/JRASERVER-72009
CVE: CVE-2019-10941
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected system, and successful exploitation requires no system privileges.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf
CVE: CVE-2021-25665
Published: 2021-09-14
Description: A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13700)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-109294.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1074/; https://cert-portal.siemens.com/productcert/pdf/ssa-109294.pdf
CVE: CVE-2021-27391
Published: 2021-09-14
Description: A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the device with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-944498.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-944498.pdf
CVE: CVE-2021-31891
Published: 2021-09-14
Description: A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf
CVE: CVE-2021-33716
Published: 2021-09-14
Description: A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions < V1.1). An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf
CVE: CVE-2021-33719
Published: 2021-09-14
Description: A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf