deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6880
Published: 2018-02-12
Description: EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md; https://kongxin.gitbook.io/empirecms/; https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md
CVE: CVE-2018-6881
Published: 2018-02-12
Description: EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md; https://kongxin.gitbook.io/dedecms-5-7-bug/; https://kongxin.gitbook.io/empirecms/
CVE: CVE-2018-6888
Published: 2018-02-12
Description: An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cross Site Request forgery: using a forged HTTP request, a malicious user can lead a user to unknowingly create / delete or modify a user account due to the lack of an anti-CSRF token.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-type-setter.html; https://www.exploit-db.com/exploits/44029/; https://securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-type-setter.html
CVE: CVE-2018-6889
Published: 2018-02-12
Description: An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://securitywarrior9.blogspot.in/2018/02/host-header-injection-type-setter-cms-51.html; https://www.exploit-db.com/exploits/44028/; https://securitywarrior9.blogspot.in/2018/02/host-header-injection-type-setter-cms-51.html
CVE: CVE-2018-6506
Published: 2018-02-12
Description: Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/; https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/
CVE: CVE-2017-18175
Published: 2018-02-12
Description: Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html; https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html; https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE: CVE-2017-18176
Published: 2018-02-12
Description: Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html; https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html; https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE: CVE-2017-18177
Published: 2018-02-12
Description: Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html; https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html; https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE: CVE-2017-18178
Published: 2018-02-12
Description: Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html; https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html; https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE: CVE-2017-18179
Published: 2018-02-12
Description: Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html; https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html; https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE: CVE-2018-6893
Published: 2018-02-12
Description: controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://xianzhi.aliyun.com/forum/topic/2050; https://xianzhi.aliyun.com/forum/topic/2050
CVE: CVE-2016-5397
Published: 2018-02-12
Description: The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://mail-archives.apache.org/mod_mbox/thrift-user/201701.mbox/raw/%3CCANyrgvc3W%3DMJ9S-hMZecPNzxkyfgNmuSgVfW2hdDSz5ke%2BOPhQ%40mail.gmail.com%3E; http://www.securityfocus.com/bid/103025; https://access.redhat.com/errata/RHSA-2018:2669
CVE: CVE-2016-8742
Published: 2018-02-12
Description: The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB batch or binary files. A subsequent service or server restart will then run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addressed in CouchDB 2.0.0.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://mail-archives.apache.org/mod_mbox/couchdb-dev/201612.mbox/%3C825F65E1-0E5F-4E1F-8053-CF2C6200C526%40apache.org%3E; http://www.securityfocus.com/bid/94766; https://www.exploit-db.com/exploits/40865/
CVE: CVE-2018-6926
Published: 2018-02-12
Description: In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems (where rh_shell_fix was enabled), and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by the setting being only accessible to the site administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/MISP/MISP/commit/0a2aa9d52492d960b9a161160acedbe9caaa4126; https://github.com/MISP/MISP/commit/0a2aa9d52492d960b9a161160acedbe9caaa4126
CVE: CVE-2016-9569
Published: 2018-02-12
Description: The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/; https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/
CVE: CVE-2016-9570
Published: 2018-02-12
Description: cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-476
References: https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/; https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/
CVE: CVE-2017-13228
Published: 2018-02-12
Description: In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13229
Published: 2018-02-12
Description: A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103016; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103016
CVE: CVE-2017-13230
Published: 2018-02-12
Description: In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65483665.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13231
Published: 2018-02-12
Description: In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13232
Published: 2018-02-12
Description: In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68953950.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-787
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13233
Published: 2018-02-12
Description: In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13234
Published: 2018-02-12
Description: In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68159767.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/102976; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102976
CVE: CVE-2017-13235
Published: 2018-02-12
Description: A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2018-02-01; https://source.android.com/security/bulletin/pixel/2018-02-01
CVE: CVE-2017-13236
Published: 2018-02-12
Description: In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217699.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/102979; https://source.android.com/security/bulletin/2018-02-01; https://www.exploit-db.com/exploits/43996/
CVE: CVE-2017-13238
Published: 2018-02-12
Description: In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-64610940.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103024; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/103024
CVE: CVE-2017-13239
Published: 2018-02-12
Description: A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103012; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103012
CVE: CVE-2017-13240
Published: 2018-02-12
Description: A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1. ID: A-68694819.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103011; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103011
CVE: CVE-2017-13241
Published: 2018-02-12
Description: A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-69065651.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103017; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103017
CVE: CVE-2017-13242
Published: 2018-02-12
Description: A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-62672248.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103014; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103014
CVE: CVE-2017-13243
Published: 2018-02-12
Description: A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103013; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103013
CVE: CVE-2017-13244
Published: 2018-02-12
Description: A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103008; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103008
CVE: CVE-2017-13245
Published: 2018-02-12
Description: A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103008; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103008
CVE: CVE-2017-13246
Published: 2018-02-12
Description: A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103029; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103029
CVE: CVE-2017-13247
Published: 2018-02-12
Description: In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-71486645.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/103027; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/103027
CVE: CVE-2018-6927
Published: 2018-02-12
Description: The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a; http://www.securityfocus.com/bid/103023; https://access.redhat.com/errata/RHSA-2018:0654
CVE: CVE-2018-1214
Published: 2018-02-12
Description: Dell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named "OMEAdapterUser" with a default password as part of the installation process. This unnecessary user account also remains even after an upgrade from v1.1 to v1.2. Access to the management console can be achieved by someone with knowledge of the default password. If SupportAssist Enterprise is installed on a server running OpenManage Essentials (OME), the OmeAdapterUser user account is added as a member of the OmeAdministrators group for the OME. An unauthorized person with knowledge of the default password and access to the OME web console could potentially use this account to gain access to the affected installation of OME with OmeAdministrators privileges. This is fixed in version 1.2.1.
CVSS Score: 7.0 (HIGH)
CWE: CWE-798
References: http://www.dell.com/support/article/us/en/04/sln308843/dell-emc-supportassist-enterprise-server-storage-networking-undocumented-default-account-vulnerability; http://www.dell.com/support/article/us/en/04/sln308843/dell-emc-supportassist-enterprise-server-storage-networking-undocumented-default-account-vulnerability
CVE: CVE-2017-17722
Published: 2018-02-12
Description: In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://bugzilla.redhat.com/show_bug.cgi?id=1524116; https://bugzilla.redhat.com/show_bug.cgi?id=1524116
CVE: CVE-2017-17723
Published: 2018-02-12
Description: In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1524104; https://security.gentoo.org/glsa/201811-14; https://bugzilla.redhat.com/show_bug.cgi?id=1524104
CVE: CVE-2017-17724
Published: 2018-02-12
Description: In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2019:2101; https://bugzilla.redhat.com/show_bug.cgi?id=1524107; https://github.com/Exiv2/exiv2/issues/263
CVE: CVE-2017-17725
Published: 2018-02-12
Description: In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1525055; https://github.com/Exiv2/exiv2/issues/188; https://bugzilla.redhat.com/show_bug.cgi?id=1525055
CVE: CVE-2017-9963
Published: 2018-02-12
Description: A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/; https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere; http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
CVE: CVE-2017-9967
Published: 2018-02-12
Description: A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization (ASLR) and Data Execution prevention (DEP) were not properly configured resulting in weak security.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103022; https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/; http://www.securityfocus.com/bid/103022
CVE: CVE-2017-9968
Published: 2018-02-12
Description: A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/103048; https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03; https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/
CVE: CVE-2017-9969
Published: 2018-02-12
Description: An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-522
References: http://www.securityfocus.com/bid/103046; https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03; https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/