deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1609
Published: 2021-08-04
Description: Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy
CVE: CVE-2021-1610
Published: 2021-08-04
Description: Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy
CVE: CVE-2021-26096
Published: 2021-08-04
Description: Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-20-188; https://fortiguard.com/advisory/FG-IR-20-188
CVE: CVE-2021-32706
Published: 2021-08-04
Description: Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used to execute code, list directories, and overwrite sensitive files. The issue lies in the fact that one of the periods is not escaped, allowing any character to be used in its place. A patch for this vulnerability was released in version 5.5.1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1; https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-5cm9-6p3m-v259; https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1
CVE: CVE-2021-32793
Published: 2021-08-04
Description: Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added as a wildcard domain to a blocklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, this is a persistent XSS vulnerability. A remote attacker can therefore attack administrative user accounts through client-side attacks. Pi-hole Web Interface version 5.5.1 contains a patch for this vulnerability.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1; https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-g3w6-q4fg-p8x8; https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1
CVE: CVE-2021-34707
Published: 2021-08-04
Description: A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-disc-PjTZ5r6C; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-disc-PjTZ5r6C
CVE: CVE-2021-38111
Published: 2021-08-04
Description: The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (Near Field Magnetic Induction) protocol.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://defcon.org/html/defcon-29/dc-29-speakers.html#kintigh; https://github.com/skintigh/defcon27_badge_sdr; https://defcon.org/html/defcon-29/dc-29-speakers.html#kintigh
CVE: CVE-2021-20028
Published: 2021-08-04
Description: Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20028
CVE: CVE-2021-22124
Published: 2021-08-04
Description: An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and FortiAuthenticator before 6.0.6 may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://fortiguard.com/advisory/FG-IR-20-170; https://fortiguard.com/advisory/FG-IR-20-170
CVE: CVE-2021-24014
Published: 2021-08-04
Description: Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-209; https://fortiguard.com/advisory/FG-IR-20-209
CVE: CVE-2021-32464
Published: 2021-08-04
Description: An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an attacker to modify a specific script before it is executed. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://success.trendmicro.com/jp/solution/000287796; https://success.trendmicro.com/solution/000286857; https://success.trendmicro.com/solution/000287819
CVE: CVE-2021-32465
Published: 2021-08-04
Description: An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281
References: https://success.trendmicro.com/jp/solution/000287796; https://success.trendmicro.com/solution/000287819; https://www.zerodayinitiative.com/advisories/ZDI-21-911/
CVE: CVE-2021-38113
Published: 2021-08-04
Description: In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/1387; https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/1387
CVE: CVE-2020-22352
Published: 2021-08-04
Description: The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1423; https://github.com/gpac/gpac/issues/1423
CVE: CVE-2020-24829
Published: 2021-08-04
Description: An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media_tools/mpegts.c that can cause a denial of service (DOS) via a crafted MP4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/blob/v0.5.2/src/media_tools/mpegts.c#L2204; https://github.com/gpac/gpac/commit/8c5e847185d74462d674ee7d28fb46c29dae6dd2; https://github.com/gpac/gpac/issues/1422
CVE: CVE-2021-38114
Published: 2021-08-04
Description: libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: https://github.com/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1; https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html; https://patchwork.ffmpeg.org/project/ffmpeg/patch/PAXP193MB12624C21AE412BE95BA4D4A4B6F09%40PAXP193MB1262.EURP193.PROD.OUTLOOK.COM/
CVE: CVE-2021-38115
Published: 2021-08-04
Description: read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/libgd/libgd/issues/697; https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032; https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
CVE: CVE-2021-31867
Published: 2021-08-04
Description: Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-31869
Published: 2021-08-04
Description: Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36800
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /{company_id}/sales/invoices/{invoice_id} with an items[0][price] that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the product.
CVSS Score: 8.7 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36801
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue was fixed in version 2.1.13 of the product.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639, CWE-639
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36802
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and sending it in an otherwise normal HTTP POST request. This issue was fixed in version 2.1.13 of the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36803
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36804
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requests through a running Akaunting instance, if that attacker knows the target's e-mail address. This issue was fixed in version 2.1.13 of the product. Please note that this issue is ultimately caused by the defaults provided by the Laravel framework, specifically how proxy headers are handled with respect to multi-tenant implementations. In other words, while this is not technically a vulnerability in Laravel, this default configuration is very likely to lead to practically identical identical vulnerabilities in Laravel projects that implement multi-tenant applications.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-640, CWE-640
References: https://github.com/laravel/laravel/pull/5477; https://www.laravel-enlightn.com/docs/security/host-injection-analyzer.html; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-36805
Published: 2021-08-04
Description: Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed in version 2.1.13 of the product.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-3539
Published: 2021-08-04
Description: EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/; https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE: CVE-2021-32598
Published: 2021-08-05
Description: An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-444
References: https://fortiguard.com/advisory/FG-IR-21-063; https://fortiguard.com/advisory/FG-IR-21-063
CVE: CVE-2021-32603
Published: 2021-08-05
Description: A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://fortiguard.com/advisory/FG-IR-21-050; https://fortiguard.com/advisory/FG-IR-21-050
CVE: CVE-2021-38095
Published: 2021-08-05
Description: The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as demonstrated by an api/v1/users/1 request.
CVSS Score: 7.5 (HIGH)
References: https://github.com/FlaviuPopescu/Spigit-PoC; https://www.planview.com/products-solutions/products/spigit/; https://github.com/FlaviuPopescu/Spigit-PoC
CVE: CVE-2021-37604
Published: 2021-08-05
Description: In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by injecting messages with a sufficiently large frame counter value and invalid payload. This results in denial of service/valid packets in the network. There is also a possibility of a replay attack in the stack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://ww1.microchip.com/downloads/en/DeviceDoc/asf-release-notes-3.50.0.100-readme.pdf; https://www.microchip.com/en-us/development-tools-tools-and-software/libraries-code-examples-and-more/advanced-software-framework-for-sam-devices#Downloads; https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/miwi-software-vulnerability
CVE: CVE-2021-37605
Published: 2021-08-05
Description: In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://ww1.microchip.com/downloads/en/DeviceDoc/asf-release-notes-3.50.0.100-readme.pdf; https://ww1.microchip.com/downloads/en/DeviceDoc/asf-release-notes-3.51.0.101-readme.pdf; https://www.microchip.com/en-us/development-tools-tools-and-software/libraries-code-examples-and-more/advanced-software-framework-for-sam-devices#Downloads
CVE: CVE-2021-38138
Published: 2021-08-05
Description: OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163753/OneNav-Beta-0.9.12-Cross-Site-Scripting.html; https://github.com/helloxz/onenav/issues/26; https://github.com/helloxz/onenav/releases
CVE: CVE-2020-22732
Published: 2021-08-05
Description: CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12288; http://dev.cmsmadesimple.org/bug/view/12288
CVE: CVE-2021-37625
Published: 2021-08-05
Description: Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-loop for a TCP socket/TLS socket/TCP+TLS multi-socket causes an early exit from the run loop that should continue infinitely unless terminated by a local user, effectively causing the whole database server to shut down. This has severe impact and can be used to easily cause DoS attacks without the need to use much bandwidth. The attack vectors include using an incomplete TLS connection for example by not providing the certificate for the connection and using a specially crafted TCP packet that triggers the application layer backoff algorithm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-253, CWE-252
References: https://github.com/skytable/skytable/commit/bb19d024ea1e5e0c9a3d75a9ee58ff03c70c7e5d; https://github.com/skytable/skytable/security/advisories/GHSA-q27r-h25m-hcc7; https://security.skytable.io/ve/s/00002.html
CVE: CVE-2021-21738
Published: 2021-08-05
Description: ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects: <ZXIPTV><ZXIPTV-EAS_PV5.06.04.09>
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016764; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016764
CVE: CVE-2021-21739
Published: 2021-08-05
Description: A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficiently verify the data reliability, attackers could replace an authenticated optical module on the equipment with an unauthenticated one, bypassing system authentication and detection, thus affecting signal transmission. This affects: <ZXCTN 6120H><V5.10.00B24>
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-345
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017024; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017024
CVE: CVE-2021-21863
Published: 2021-08-05
Description: A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=
CVE: CVE-2021-22240
Published: 2021-08-05
Description: Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22240.json; https://gitlab.com/gitlab-org/gitlab/-/issues/327641; https://hackerone.com/reports/1166566
CVE: CVE-2021-22241
Published: 2021-08-05
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was possible to exploit a stored cross-site-scripting via a specifically crafted default branch name.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22241.json; https://gitlab.com/gitlab-org/gitlab/-/issues/336460; https://hackerone.com/reports/1256777
CVE: CVE-2021-23849
Published: 2021-08-05
Description: A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-352
References: https://psirt.bosch.com/security-advisories/bosch-sa-033305-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-033305-bt.html
CVE: CVE-2021-25443
Published: 2021-08-05
Description: A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-825, CWE-416
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=8; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=8
CVE: CVE-2021-25444
Published: 2021-08-05
Description: An IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileged process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-330
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=8; https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=8