deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-32748
Published: 2023-01-30
Description: A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to end users when using CAE to configure devices. Additionally, credentials could leak which would enable an attacker the ability to log into the configuration tool and compromise other devices in the network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)
CVSS Score: 7.9 (HIGH)
CWE: CWE-295
References: https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf; https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-08_Cybersecurity_Admin_Expert_Security_Notification.pdf
CVE: CVE-2022-48175
Published: 2023-01-30
Description: Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/y1s3m0/vulnfind/blob/main/rukovoditel/rce_ajax_request.md; https://github.com/y1s3m0/vulnfind/blob/main/rukovoditel/rce_ajax_request.md
CVE: CVE-2023-22389
Published: 2023-01-30
Description: 
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the file.  





CVSS Score: 5.7 (MEDIUM)
CWE: CWE-256
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03; https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03
CVE: CVE-2023-23582
Published: 2023-01-30
Description: 
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely. 





CVSS Score: 5.3 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03; https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03
CVE: CVE-2022-45897
Published: 2023-01-31
Description: On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://Xerox.com; https://gist.github.com/waffl3ss/eb61d38b5c44131d[PII_REDACTED]c63640#file-cve-2022-45897; https://Xerox.com
CVE: CVE-2022-48176
Published: 2023-01-31
Description: Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://hdwsec.fr/blog/20221109-netgear/; https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146; https://www.netgear.com/about/security/
CVE: CVE-2022-30421
Published: 2023-01-31
Description: Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained via(local) password authentication module.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-287
References: http://global.11st.co.kr/glb/product/SellerProductDetail.tmall?method=getSellerProductDetail&prdNo=[PII_REDACTED]; http://global.gmarket.co.kr/item?goodscode=741668527; https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-px7r-44vj-8h7m
CVE: CVE-2022-40258
Published: 2023-01-31
Description: AMI Megarac Weak password hashes for
Redfish & API
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-916, CWE-916
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf
CVE: CVE-2022-44897
Published: 2023-01-31
Description: A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://apollotheme.com; https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-44897/poc.txt; http://apollotheme.com
CVE: CVE-2022-4041
Published: 2023-01-31
Description: Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.
This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-266, CWE-287, CWE-269
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-103/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-103/index.html
CVE: CVE-2022-4441
Published: 2023-01-31
Description: Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.
This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1.

CVSS Score: 7.6 (HIGH)
CWE: CWE-266, CWE-287, CWE-269
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-103/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-103/index.html
CVE: CVE-2022-4898
Published: 2023-01-31
Description: In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was taken to prevent the possibility of the support link being susceptible to XSS
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://advisories.octopus.com/post/2022/sa2023-01/; https://advisories.octopus.com/post/2022/sa2023-01/
CVE: CVE-2022-21129
Published: 2023-01-31
Description: Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function.**Note:** In order to exploit this vulnerability appium-running 0.1.3  has to be installed as one of nemo-appium dependencies. 
CVSS Score: 7.4 (HIGH)
CWE: CWE-78, CWE-77
References: https://github.com/paypal/nemo-appium/blob/master/index.js%23L27; https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195f; https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747
CVE: CVE-2022-25881
Published: 2023-01-31
Description: This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-1333, CWE-1333
References: https://github.com/kornelski/http-cache-semantics/blob/master/index.js%23L83; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253332
CVE: CVE-2022-25979
Published: 2023-01-31
Description: Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f; https://github.com/jsuites/jsuites/issues/134; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331
CVE: CVE-2022-45789
Published: 2023-01-31
Description: A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)


CVSS Score: 8.1 (HIGH)
CWE: CWE-294
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-06_Modicon_Controllers_Security_Notification.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-06_Modicon_Controllers_Security_Notification.pdf
CVE: CVE-2022-39059
Published: 2023-01-31
Description: ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6886-2c546-1.html; https://www.twcert.org.tw/tw/cp-132-6886-2c546-1.html
CVE: CVE-2022-39060
Published: 2023-01-31
Description: ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html; https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html
CVE: CVE-2022-39061
Published: 2023-01-31
Description: ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://www.twcert.org.tw/tw/cp-132-6888-b5f81-1.html; https://www.twcert.org.tw/tw/cp-132-6888-b5f81-1.html
CVE: CVE-2023-22900
Published: 2023-01-31
Description: Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/tw/cp-132-6885-d679e-1.html; https://www.twcert.org.tw/tw/cp-132-6885-d679e-1.html
CVE: CVE-2022-44644
Published: 2023-01-31
Description: In Apache Linkis <=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could read arbitrary local files by connecting a rogue MySQL server, By adding allowLoadLocalInfile to true in the JDBC parameter. Therefore, the parameters in the JDBC URL should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected. 

We recommend users upgrade the version of Linkis to version 1.3.1

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/hwq9ytq6y1kdh9lz5znptkcrdll9x85h; https://lists.apache.org/thread/hwq9ytq6y1kdh9lz5znptkcrdll9x85h
CVE: CVE-2022-44645
Published: 2023-01-31
Description: In Apache Linkis <=1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures new datasource with a MySQL data source and malicious parameters. Therefore, the parameters in the jdbc url should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected.

We recommend users to upgrade the version of Linkis to version 1.3.1.

CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://lists.apache.org/thread/zlcfmvt65blqc4n6fxypg6f0ns8fqfz4; https://lists.apache.org/thread/zlcfmvt65blqc4n6fxypg6f0ns8fqfz4
CVE: CVE-2023-0591
Published: 2023-01-31
Description: 
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write access to that file or directory).

This is due to the fact that a node name (dent_node.name) is considered trusted and joined to the extraction directory path during processing, then the node content is written to that joined path. By crafting a malicious UBIFS file with node names holding path traversal payloads (e.g. ../../tmp/outside.txt), it's possible to force ubi_reader to write outside of the extraction directory.



This issue affects ubi-reader before 0.8.5.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/jrspruitt/ubi_reader/pull/57; https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/; https://github.com/jrspruitt/ubi_reader/pull/57
CVE: CVE-2023-0592
Published: 2023-01-31
Description: A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6; https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/; https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6
CVE: CVE-2023-0593
Published: 2023-01-31
Description: A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory.

This issue affects yaffshiv up to version 0.1 included, which is the most recent at time of publication.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/devttys0/yaffshiv/pull/3/files; https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/; https://github.com/devttys0/yaffshiv/pull/3/files
CVE: CVE-2023-24829
Published: 2023-01-31
Description: Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.



CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo; https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo
CVE: CVE-2022-45435
Published: 2023-01-31
Description: IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom capability that contains the SetIdentityForwarding right to modify the work item forwarding configuration for identities other than the ones that should be allowed by Lifecycle Manager Quicklink Population configuration.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.sailpoint.com/security-advisories/sailpoint-identityiq-identity-forwarding-vulnerability-cve-2022-45435/; https://www.sailpoint.com/security-advisories/sailpoint-identityiq-identity-forwarding-vulnerability-cve-2022-45435/
CVE: CVE-2022-46835
Published: 2023-01-31
Description: IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.sailpoint.com/security-advisories/sailpoint-identityiq-file-traversal-vulnerability-cve-2022-46835/; https://www.sailpoint.com/security-advisories/sailpoint-identityiq-file-traversal-vulnerability-cve-2022-46835/
CVE: CVE-2020-20402
Published: 2023-01-31
Description: Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/Westbrookadmin/portfolioCMS/issues/2; https://github.com/Westbrookadmin/portfolioCMS/issues/2
CVE: CVE-2022-24963
Published: 2023-01-31
Description: Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9
CVE: CVE-2022-25147
Published: 2023-01-31
Description: Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.




This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8
CVE: CVE-2022-28331
Published: 2023-01-31
Description: On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r; https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r
CVE: CVE-2022-45598
Published: 2023-01-31
Description: Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e; https://github.com/laurent22/joplin/releases/tag/v2.9.17; https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e
CVE: CVE-2022-47035
Published: 2023-01-31
Description: Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10314; https://www.dlink.com/en/security-bulletin/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10314
CVE: CVE-2022-47780
Published: 2023-01-31
Description: SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Bangresto; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Bangresto
CVE: CVE-2023-24162
Published: 2023-01-31
Description: Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://gitee.com/dromara/hutool/issues/I6AEX2; https://github.com/dromara/hutool/issues/2855; https://gitee.com/dromara/hutool/issues/I6AEX2
CVE: CVE-2023-24163
Published: 2023-01-31
Description: SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868; https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link; https://github.com/dromara/hutool/issues/3149
CVE: CVE-2023-22610
Published: 2023-01-31
Description: 
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of
Service against the Geo SCADA server when specific messages are sent to the server over the
database server TCP port. 




CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf
CVE: CVE-2023-22611
Published: 2023-01-31
Description: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf
CVE: CVE-2022-45172
Published: 2023-01-31
Description: An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected by flaws in authorization logic, through which a malicious user (with no privileges) is able to perform privilege escalation to the administrator role, and steal the accounts of any users on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-47697
Published: 2023-01-31
Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover; https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover
CVE: CVE-2022-47698
Published: 2023-01-31
Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/stored_XSS; https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/stored_XSS
CVE: CVE-2022-47699
Published: 2023-01-31
Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/password_pol_bypass.md; https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/password_pol_bypass.md