deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-42356
Published: 2024-08-08
Description: Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the `context` variable is injected into almost any Twig Template and allows to access to current language, currency information. The context object allows also to switch for a short time the scope of the Context as a helper with a callable function. The function can be called also from Twig and as the second parameter allows any callable, it's possible to call from Twig any statically callable PHP function/method. It's not possible as customer to provide any Twig code, the attacker would require access to Administration to exploit it using Mail templates or using App Scripts. Update to Shopware 6.6.5.1 or 6.5.8.13 to receive a patch. For older versions of 6.1, 6.2, 6.3 and 6.4 corresponding security measures are also available via a plugin.
CVSS Score: 8.3 (HIGH)
CWE: CWE-1336, CWE-94
References: https://github.com/shopware/core/commit/04183e0c02af3b404eb7d52c683734bfe0595038; https://github.com/shopware/core/commit/a784aa1cec0624e36e0ee4d41aeebaed40e0442f; https://github.com/shopware/shopware/commit/8504ba7e56e53add6a1d5b9d45015e3d899cd0ac
CVE: CVE-2024-42357
Published: 2024-08-08
Description: Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the `aggregations` object. The `name` field in this `aggregations` object is vulnerable SQL-injection and can be exploited using SQL parameters. Update to Shopware 6.6.5.1 or 6.5.8.13 to receive a patch. For older versions of 6.1, 6.2, 6.3, and 6.4, corresponding security measures are also available via a plugin.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/shopware/core/commit/63c[PII_REDACTED]0f5790a04ef889f42b764fa53c9; https://github.com/shopware/core/commit/a784aa1cec0624e36e0ee4d41aeebaed40e0442f; https://github.com/shopware/shopware/commit/57ea2f3c59483cf7c0f853e7a0d68c23ded1fe5b
CVE: CVE-2024-7490
Published: 2024-08-08
Description: Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow.
 This vulnerability is associated with program files tinydhcpserver.C and program routines lwip_dhcp_find_option.

This issue affects Advanced Software Framework: through 3.52.0.2574.


ASF is no longer being supported. Apply provided workaround or migrate to an actively maintained framework.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.microchip.com/en-us/tools-resources/develop/libraries/advanced-software-framework; https://www.kb.cert.org/vuls/id/138043
CVE: CVE-2024-41238
Published: 2024-08-08
Description: A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/SQL%20Injection%20-%20Student.pdf; https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code
CVE: CVE-2024-7477
Published: 2024-08-08
Description: A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. 

Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://download.avaya.com/css/public/documents/101091159
CVE: CVE-2024-7480
Published: 2024-08-08
Description: An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-266
References: https://download.avaya.com/css/public/documents/101091159
CVE: CVE-2024-0101
Published: 2024-08-08
Description: NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5559
CVE: CVE-2024-0102
Published: 2024-08-08
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5548
CVE: CVE-2024-0107
Published: 2024-08-08
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5557; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1956
CVE: CVE-2024-0108
Published: 2024-08-08
Description: NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges.
CVSS Score: 8.7 (HIGH)
CWE: CWE-755, CWE-755
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5555
CVE: CVE-2024-42365
Published: 2024-08-08
Description: Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. This occurs because they are able to curl remote files and write them to disk, but are also able to append to existing files using the `FILE` function inside the `SET` application. This issue may result in privilege escalation, remote code execution and/or blind server-side request forgery with arbitrary protocol. Asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2 contain a fix for this issue.
CVSS Score: 7.4 (HIGH)
CWE: CWE-267, CWE-1220
References: https://github.com/asterisk/asterisk/blob/14367caaf7241df1eceea7c45c5b261989c2c6db/main/manager.c#L6426; https://github.com/asterisk/asterisk/blob/7d28165cb1b2d02d66e8693bd3fe23ee72fc55d8/main/manager.c#L6426; https://github.com/asterisk/asterisk/commit/42a2f4ccfa2c7062a15063e765916b3332e34cc4
CVE: CVE-2024-42366
Published: 2024-08-08
Description: VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In addition to the patch, VRCX maintainers worked with the VRC team and blocked the older version of VRCX on the VRC's API side. Users who use the older version of VRCX must update their installation to continue using VRCX.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-269, CWE-79
References: https://github.com/vrcx-team/VRCX/commit/cd2387aa3289f936ce60049121c24b0765bd4180; https://github.com/vrcx-team/VRCX/security/advisories/GHSA-j98g-mgjm-wqph
CVE: CVE-2024-7121
Published: 2024-08-08
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-7123
Published: 2024-08-08
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-7394
Published: 2024-08-08
Description: Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName().  A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6  with vector   https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks, m3dium for reporting.  (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/933-release-notes?pk_vid=e367a434ef[PII_REDACTED]055753d52041; https://documentation.concretecms.org/developers/introduction/version-history/8518-release-notes?pk_vid=e367a434ef[PII_REDACTED]055758d52041; https://github.com/concretecms/concretecms/commit/c08d9671cec4e7afdabb547339c4bc0bed8eab06
CVE: CVE-2023-24062
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2023-24063
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-354, CWE-354
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2023-24064
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.8 (MEDIUM)
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2023-28865
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensuring the expected hash sum) during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-345, CWE-353
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2023-33206
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-354, CWE-94
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2023-40261
Published: 2024-08-08
Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf; https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
CVE: CVE-2024-0104
Published: 2024-08-08
Description: NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-284
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5559
CVE: CVE-2024-37382
Published: 2024-08-08
Description: An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.abinitio.com/en/security-advisories/ab-2024-003/
CVE: CVE-2024-39287
Published: 2024-08-08
Description: Dorsett Controls Central Server update server has potential information 
leaks with an unprotected file that contains passwords and API keys.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://portal.dtscada.com/#/security-bulletins?bulletin=1; https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
CVE: CVE-2024-41161
Published: 2024-08-08
Description: Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 
3.3.23.6.9 and prior, enables an unauthenticated remote attacker to 
bypass authentication using hard-coded administrator credentials. These 
accounts cannot be disabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08
CVE: CVE-2024-42408
Published: 2024-08-08
Description: The InfoScan client download page can be intercepted with a proxy, to 
expose filenames located on the system, which could lead to additional 
information exposure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://portal.dtscada.com/#/security-bulletins?bulletin=1; https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
CVE: CVE-2024-42493
Published: 2024-08-08
Description: Dorsett Controls InfoScan is vulnerable due to a leak of possible 
sensitive information through the response headers and the rendered 
JavaScript prior to user login.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://portal.dtscada.com/#/security-bulletins?bulletin=1; https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
CVE: CVE-2022-38322
Published: 2024-08-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-31315
Published: 2024-08-12
Description: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html; https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Enrique%20Nissim%20Krzysztof%20Okupski%20-%20AMD%20Sinkclose%20Universal%20Ring-2%20Privilege%20Escalation.pdf; https://news.ycombinator.com/item?id=41475975
CVE: CVE-2023-38018
Published: 2024-08-12
Description: IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system.  IBM X-Force ID:  260574.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-384
References: https://www.ibm.com/support/pages/node/7164325
CVE: CVE-2023-50809
Published: 2024-08-12
Description: In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.sonos.com/en-us/security-advisory-2024-0001
CVE: CVE-2023-50810
Published: 2024-08-12
Description: In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used to override the kernel command-line parameters and ultimately bypass the Secure Boot implementation. This affects PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: https://www.sonos.com/en-us/security-advisory-2024-0001
CVE: CVE-2024-0113
Published: 2024-08-12
Description: NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-35, CWE-22
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5563
CVE: CVE-2024-0115
Published: 2024-08-12
Description: NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-400
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5560
CVE: CVE-2024-21876
Published: 2024-08-12
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://csirt.divd.nl/CVE-2024-21876; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-1
CVE: CVE-2024-21877
Published: 2024-08-12
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in Enphase IQ Gateway (formerly known as Envoy) allows File Manipulation. The endpoint requires authentication.This issue affects Envoy: from 4.x to 8.0 and < 8.2.4225.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://csirt.divd.nl/CVE-2024-21877; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-2
CVE: CVE-2024-21878
Published: 2024-08-12
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://csirt.divd.nl/CVE-2024-21878; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-3
CVE: CVE-2024-21879
Published: 2024-08-12
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://csirt.divd.nl/CVE-2024-21879; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-4
CVE: CVE-2024-21880
Published: 2024-08-12
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-78
References: https://csirt.divd.nl/CVE-2024-21880; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-5
CVE: CVE-2024-21881
Published: 2024-08-12
Description: Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: 4.x and 5.x
CWE: CWE-326
References: https://csirt.divd.nl/CVE-2024-21881; https://csirt.divd.nl/DIVD-2024-00011; https://enphase.com/cybersecurity/advisories/ensa-2024-6
CVE: CVE-2024-22114
Published: 2024-08-12
Description: User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://support.zabbix.com/browse/ZBX-25015; https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html
CVE: CVE-2024-22116
Published: 2024-08-12
Description: An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://support.zabbix.com/browse/ZBX-25016; https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html
CVE: CVE-2024-22121
Published: 2024-08-12
Description: A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://support.zabbix.com/browse/ZBX-25011
CVE: CVE-2024-22122
Published: 2024-08-12
Description: Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
CVSS Score: 3.0 (LOW)
CWE: CWE-77, CWE-77
References: https://support.zabbix.com/browse/ZBX-25012; https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html