deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34940
Published: 2023-06-12
Description: Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/URLFilterList_Stack_BOF.md; https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/URLFilterList_Stack_BOF.md
CVE: CVE-2023-34941
Published: 2023-06-12
Description: A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/StoredXSS_FirewallURLFilter.md; https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/StoredXSS_FirewallURLFilter.md
CVE: CVE-2023-34942
Published: 2023-06-12
Description: Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/MAC_Address_StackBOF.md; https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/MAC_Address_StackBOF.md
CVE: CVE-2023-3161
Published: 2023-06-12
Description: A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1335, CWE-682
References: https://bugzilla.redhat.com/show_bug.cgi?id=2213485; https://github.com/torvalds/linux/commit/2b09d5d364986f724f17001ccfe4126b9b43a0be; https://bugzilla.redhat.com/show_bug.cgi?id=2213485
CVE: CVE-2023-27716
Published: 2023-06-12
Description: An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nodes running on it.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/G-H-Z/CVE/blob/main/CVE-2023-27716; https://github.com/G-H-Z/CVE/blob/main/CVE-2023-27716
CVE: CVE-2023-32219
Published: 2023-06-12
Description: A Mazda model (2015-2016) can be unlocked via an unspecified method.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-32220
Published: 2023-06-12
Description: Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287, CWE-863
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-32221
Published: 2023-06-12
Description: EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-3159
Published: 2023-06-12
Description: A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff; https://github.com/torvalds/linux/commit/b7c81f80246fac44077166f3e07103affe6db8ff
CVE: CVE-2023-26294
Published: 2023-06-12
Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842
CVE: CVE-2023-26295
Published: 2023-06-12
Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842
CVE: CVE-2023-26296
Published: 2023-06-12
Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842
CVE: CVE-2023-26297
Published: 2023-06-12
Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842
CVE: CVE-2023-26298
Published: 2023-06-12
Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]931-16/hpsbhf03842
CVE: CVE-2023-32673
Published: 2023-06-12
Description: Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hp.com/us-en/document/ish_8[PII_REDACTED]440-16/hspbhf03848; https://support.hp.com/us-en/document/ish_8[PII_REDACTED]440-16/hspbhf03848
CVE: CVE-2023-32674
Published: 2023-06-12
Description: Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://support.hp.com/us-en/document/ish_8[PII_REDACTED]440-16/hspbhf03848; https://support.hp.com/us-en/document/ish_8[PII_REDACTED]440-16/hspbhf03848
CVE: CVE-2023-2277
Published: 2023-06-13
Description: The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious JavaScript via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wpdirectorykit/tags/1.1.8/application/views/wdk_resultitem/resultitem_edit.php#L34; https://plugins.trac.wordpress.org/changeset/2904689/wpdirectorykit/trunk/application/controllers/Wdk_resultitem.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/82c6ed2f-20e8-46d1-a460-16d32b7536cd?source=cve
CVE: CVE-2023-2278
Published: 2023-06-13
Description: The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' function. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/wpdirectorykit/tags/1.1.8/vendor/Winter_MVC/core/mvc_loader.php#L91; https://plugins.trac.wordpress.org/changeset/2904689/wpdirectorykit/trunk/vendor/Winter_MVC/core/mvc_loader.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/87399a07-d2d8-42cd-81f0-9060f6cfff48?source=cve
CVE: CVE-2023-2351
Published: 2023-06-13
Description: The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'ajax_admin' function in versions up to, and including, 1.2.3. This makes it possible for authenticated attackers with subscriber-level permissions or above to delete or change plugin settings, import demo data, delete Directory Kit related posts and terms, and install arbitrary plugins. A partial patch was introduced in version 1.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wpdirectorykit/tags/1.1.8/public/class-wpdirectorykit-public.php#L249; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2905046%40wpdirectorykit&new=2905046%40wpdirectorykit&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2905795%40wpdirectorykit&new=2905795%40wpdirectorykit&sfp_email=&sfph_mail=
CVE: CVE-2023-2563
Published: 2023-06-13
Description: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect nonce validation on the function _accua_forms_form_edit_action. This makes it possible for unauthenticated attackers to delete forms created with this plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/contact-forms/trunk/accua-forms.php#L738; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2924628%40contact-forms&new=2924628%40contact-forms&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f80a1f13-c1b9-4259-8d96-71a3cbcaf4ca?source=cve
CVE: CVE-2023-2827
Published: 2023-06-13
Description: SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.


CVSS Score: 7.9 (HIGH)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/3301942; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3301942
CVE: CVE-2023-32114
Published: 2023-06-13
Description: SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.
CVSS Score: 2.7 (LOW)
CWE: CWE-732
References: https://launchpad.support.sap.com/#/notes/3325642; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3325642
CVE: CVE-2023-32115
Published: 2023-06-13
Description: An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.


CVSS Score: 4.2 (MEDIUM)
CWE: CWE-89
References: https://launchpad.support.sap.com/#/notes/1794761; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/1794761
CVE: CVE-2023-33984
Published: 2023-06-13
Description: SAP NetWeaver (Design Time Repository) - version 7.50, returns an unfavorable content type for some versioned files, which could allow an authorized attacker to create a file with a malicious content and send a link to a victim in an email or instant message. Under certain circumstances, this could lead to Cross-Site Scripting vulnerability.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3318657; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3318657
CVE: CVE-2023-33985
Published: 2023-06-13
Description: SAP NetWeaver Enterprise Portal - version 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3331627; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3331627
CVE: CVE-2023-33986
Published: 2023-06-13
Description: SAP CRM ABAP (Grantor Management) - versions 700, 701, 702, 712, 713, 714, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2826092; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/2826092
CVE: CVE-2023-33991
Published: 2023-06-13
Description: SAP UI5 Variant Management - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, does not sufficiently encode user-controlled inputs on reading data from the server, resulting in Stored Cross-Site Scripting (Stored XSS) vulnerability. After successful exploitation, an attacker with user level access can cause high impact on confidentiality, modify some information and can cause unavailability of the application at user level.


CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3324285; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3324285
CVE: CVE-2023-2876
Published: 2023-06-13
Description: Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.


CVSS Score: 3.1 (LOW)
CWE: CWE-1004, CWE-732
References: https://search.abb.com/library/Download.aspx?DocumentID=2NGA001423&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2NGA001423&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2023-0142
Published: 2023-06-13
Description: Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-427
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_05; https://www.synology.com/en-global/security/advisory/Synology_SA_23_06; https://www.synology.com/en-global/security/advisory/Synology_SA_23_05
CVE: CVE-2023-2673
Published: 2023-06-13
Description: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1287
References: https://cert.vde.com/en/advisories/VDE-2023-010/; https://cert.vde.com/en/advisories/VDE-2023-010/
CVE: CVE-2023-2729
Published: 2023-06-13
Description: Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
CVSS Score: 5.9 (MEDIUM)
References: https://www.synology.com/en-global/security/advisory/Synology_SA_23_07; https://www.synology.com/en-global/security/advisory/Synology_SA_23_08; https://www.synology.com/en-global/security/advisory/Synology_SA_23_07
CVE: CVE-2022-33877
Published: 2023-06-13
Description: An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder.
CVSS Score: 7.0 (HIGH)
CWE: CWE-276, CWE-276
References: https://fortiguard.com/psirt/FG-IR-22-229; https://fortiguard.com/psirt/FG-IR-22-229
CVE: CVE-2022-39946
Published: 2023-06-13
Description: An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions, 8.6 all versions, 8.5 all versions may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp calls via crafted HTTP requests.
CVSS Score: 7.6 (HIGH)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-22-332; https://fortiguard.com/psirt/FG-IR-22-332
CVE: CVE-2022-41327
Published: 2023-06-13
Description: A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-319, CWE-319
References: https://fortiguard.com/psirt/FG-IR-22-380; https://fortiguard.com/psirt/FG-IR-22-380
CVE: CVE-2022-42474
Published: 2023-06-13
Description: A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://fortiguard.com/psirt/FG-IR-22-393; https://fortiguard.com/psirt/FG-IR-22-393
CVE: CVE-2022-42478
Published: 2023-06-13
Description: An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307, CWE-307
References: https://fortiguard.com/psirt/FG-IR-22-258; https://fortiguard.com/psirt/FG-IR-22-258
CVE: CVE-2022-43949
Published: 2023-06-13
Description: A use of a broken or risky cryptographic algorithm [CWE-327]  in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://fortiguard.com/psirt/FG-IR-22-259; https://fortiguard.com/psirt/FG-IR-22-259
CVE: CVE-2022-43953
Published: 2023-06-13
Description: A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-134, CWE-134
References: https://fortiguard.com/psirt/FG-IR-22-463; https://fortiguard.com/psirt/FG-IR-22-463
CVE: CVE-2023-22633
Published: 2023-06-13
Description: An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://fortiguard.com/psirt/FG-IR-22-521; https://fortiguard.com/psirt/FG-IR-22-521
CVE: CVE-2023-22639
Published: 2023-06-13
Description: A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows attacker to escalation of privilege via specifically crafted commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://fortiguard.com/psirt/FG-IR-22-494; https://fortiguard.com/psirt/FG-IR-22-494
CVE: CVE-2023-25609
Published: 2023-06-13
Description: A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://fortiguard.com/psirt/FG-IR-22-493; https://fortiguard.com/psirt/FG-IR-22-493
CVE: CVE-2023-25910
Published: 2023-06-13
Description: A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product contains a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server.

An attacker with network access to the server network could leverage these embedded functions to run code with elevated privileges in the database management system's server.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://cert-portal.siemens.com/productcert/html/ssa-968170.html; https://cert-portal.siemens.com/productcert/pdf/ssa-968170.pdf; https://cert-portal.siemens.com/productcert/html/ssa-968170.html
CVE: CVE-2023-26204
Published: 2023-06-13
Description: A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate any admin user on the device GUI.
CVSS Score: 3.7 (LOW)
CWE: CWE-256, CWE-522
References: https://fortiguard.com/psirt/FG-IR-21-141; https://fortiguard.com/psirt/FG-IR-21-141