deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25698
Published: 2020-11-19
Description: Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895419; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-25699
Published: 2020-11-19
Description: In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895425; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-25700
Published: 2020-11-19
Description: In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895427; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-25701
Published: 2020-11-19
Description: If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895432; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-25702
Published: 2020-11-19
Description: In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895437; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-25703
Published: 2020-11-19
Description: The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201, CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1895439; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/
CVE: CVE-2020-28942
Published: 2020-11-19
Description: An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the restriction of client certificates (for the RA, not the end user) to a limited set of allowed CAs, thus restricting the accessibility of that RA to the rights it has within a specific role. While this works for other protocols such as CMP, it was found that the EJBCA enrollment over an EST implementation bypasses this check, allowing enrollment with a valid client certificate through any functioning and authenticated RA connected to the CA. NOTE: an attacker must already have a trusted client certificate and authorization to enroll against the targeted CA.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-295
References: https://support.primekey.com/news/posts/40; https://support.primekey.com/news/posts/40
CVE: CVE-2020-6879
Published: 2020-11-19
Description: Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule configuration interface. The WEB service backend fails to effectively verify the abnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects: ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. This is fixed in ZXHN Z500 V1.0.1.1B1.1000 and ZXHN F670L V1.1.10P2N2.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013922; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013922
CVE: CVE-2020-12495
Published: 2020-11-19
Description: Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://cert.vde.com/en-us/advisories/vde-2020-021; https://cert.vde.com/en-us/advisories/vde-2020-021
CVE: CVE-2020-12496
Published: 2020-11-19
Description: Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-control matrix on the server-side. It was found that a user with low rights can get information from endpoints that should not be available to this user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert.vde.com/en-us/advisories/vde-2020-022; https://cert.vde.com/en-us/advisories/vde-2020-022
CVE: CVE-2020-12510
Published: 2020-11-19
Description: The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions which allow every local user to modify the content. The default installation registers TcSysUI.exe for automatic execution upon log in of a user. If a less privileged user has a local account he or she can replace TcSysUI.exe. It will be executed automatically by another user during login. This is also true for users with administrative access. Consequently, a less privileged user can trick a higher privileged user into executing code he or she modified this way. By default Beckhoff’s IPCs are shipped with TwinCAT software installed this way and with just a single local user configured. Thus the vulnerability exists if further less privileged users have been added.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://cert.vde.com/en-us/advisories/vde-2020-037; https://cert.vde.com/en-us/advisories/vde-2020-037
CVE: CVE-2020-22394
Published: 2020-11-19
Description: In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/42; https://github.com/yzmcms/yzmcms/issues/42
CVE: CVE-2020-28947
Published: 2020-11-19
Description: In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/626ca544ffb5604ea01bb291f69811668b6b5631; https://github.com/MISP/MISP/commit/626ca544ffb5604ea01bb291f69811668b6b5631
CVE: CVE-2020-28941
Published: 2020-11-19
Description: An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d[PII_REDACTED]7. This occurs because of an invalid free when the line discipline is used more than once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-763
References: http://www.openwall.com/lists/oss-security/2020/11/19/5; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d[PII_REDACTED]799187d5d537a9c039a49a67e57f1; https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git/commit/?h=tty-linus&id=d[PII_REDACTED]799187d5d537a9c039a49a67e57f1
CVE: CVE-2020-28948
Published: 2020-11-19
Description: Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://github.com/pear/Archive_Tar/issues/33; https://lists.debian.org/debian-lts-announce/2020/11/msg00045.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/
CVE: CVE-2020-28949
Published: 2020-11-19
Description: Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/161095/PEAR-Archive_Tar-Arbitrary-File-Write.html; https://github.com/pear/Archive_Tar/issues/33; https://lists.debian.org/debian-lts-announce/2020/11/msg00045.html
CVE: CVE-2020-28951
Published: 2020-11-19
Description: libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=commit%3Bh=5625f5bc36954d644cb80adf8de47854c65d91c3; https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=log%3Bh=refs/tags/v18.06.9; https://git.openwrt.org/?p=project/uci.git%3Ba=commit%3Bh=a3e650911f5e6f67dcff09974df3775dfd615da6
CVE: CVE-2020-28924
Published: 2020-11-19
Description: An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limits the entropy of the passwords enormously. These passwords are often used in the crypt backend for encryption of data. It would be possible to make a dictionary of all possible passwords with about 38 million entries per password length. This would make decryption of secret material possible with a plausible amount of effort. NOTE: all passwords generated by affected versions should be changed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-331, CWE-338
References: https://github.com/rclone/rclone/issues/4783; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJIFT24Q6EFXLQZ24AER2QGFFZLMIPCD/; https://rclone.org/downloads/
CVE: CVE-2020-25989
Published: 2020-11-19
Description: Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://github.com/pritunl/pritunl-client-electron/commit/89f8c997c6f93e724f68f76f7f47f8891d9acc2d; https://vkas-afk.github.io/vuln-disclosures/; https://github.com/pritunl/pritunl-client-electron/commit/89f8c997c6f93e724f68f76f7f47f8891d9acc2d
CVE: CVE-2020-28210
Published: 2020-11-19
Description: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-04/; https://www.se.com/ww/en/download/document/SEVD-2020-315-04/
CVE: CVE-2020-28350
Published: 2020-11-19
Description: A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2020/Nov/32; http://seclists.org/fulldisclosure/2020/Nov/32
CVE: CVE-2020-28209
Published: 2020-11-19
Description: A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agent service binary path, being able to gain the privilege of the user who started the service. By default, the Enterprise Server and Enterprise Central is always installed at a location requiring Administrator privileges so the vulnerability is only valid if the application has been installed on a non-secure location.
CVSS Score: 7.0 (HIGH)
CWE: CWE-428
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-04/; https://www.se.com/ww/en/download/document/SEVD-2020-315-04/
CVE: CVE-2020-28211
Published: 2020-11-19
Description: A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-07; https://www.se.com/ww/en/download/document/SEVD-2020-315-07
CVE: CVE-2020-28212
Published: 2020-11-19
Description: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-07; https://www.se.com/ww/en/download/document/SEVD-2020-315-07
CVE: CVE-2020-28213
Published: 2020-11-19
Description: A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-07; https://www.se.com/ww/en/download/document/SEVD-2020-315-07
CVE: CVE-2020-28953
Published: 2020-11-19
Description: In BigBlueButton before 2.2.29, a user can vote more than once in a single poll.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/bigbluebutton/bigbluebutton/commit/d2cb02b3bd670265c6b1ba003f87fc261e0ac3e1; https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.28...v2.2.29; https://github.com/bigbluebutton/bigbluebutton/commit/d2cb02b3bd670265c6b1ba003f87fc261e0ac3e1
CVE: CVE-2020-28954
Published: 2020-11-19
Description: web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://github.com/bigbluebutton/bigbluebutton/commit/5c911ddeec4493f40f42e2f137800ed4692004a4; https://github.com/bigbluebutton/bigbluebutton/commit/e59bcd0c33a6a3203c011faa8823ba2cac1e4f37; https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.28...v2.2.29
CVE: CVE-2020-7538
Published: 2020-11-19
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-07/; https://www.se.com/ww/en/download/document/SEVD-2020-315-07/
CVE: CVE-2020-7544
Published: 2020-11-19
Description: A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-02/; https://www.se.com/ww/en/download/document/SEVD-2020-315-02/
CVE: CVE-2020-7550
Published: 2020-11-19
Description: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 and prior that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-092/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7551
Published: 2020-11-19
Description: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7552
Published: 2020-11-19
Description: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7553
Published: 2020-11-19
Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-124/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7554
Published: 2020-11-19
Description: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-093/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7555
Published: 2020-11-19
Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-094/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7556
Published: 2020-11-19
Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-095/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7557
Published: 2020-11-19
Description: A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-096/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7558
Published: 2020-11-19
Description: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-03/; https://www.zerodayinitiative.com/advisories/ZDI-21-091/; https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
CVE: CVE-2020-7559
Published: 2020-11-19
Description: A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.se.com/ww/en/download/document/SEVD-2020-315-07; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1140; https://www.se.com/ww/en/download/document/SEVD-2020-315-07
CVE: CVE-2020-7561
Published: 2020-11-19
Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-306
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03; https://www.se.com/ww/en/download/document/SEVD-2020-315-06/; https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03