deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-26863
Published: 2022-06-23
Description: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096; https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096
CVE: CVE-2022-26864
Published: 2022-06-23
Description: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096; https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096
CVE: CVE-2022-2182
Published: 2022-06-23
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e; https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2022-2183
Published: 2022-06-23
Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa; https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2022-32987
Published: 2022-06-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/mayank-s16/19b22b3b356646dce2639a9400f3f7d9; https://www.campcodes.com/projects/php/simple-bakery-shop-management-system/; https://gist.github.com/mayank-s16/19b22b3b356646dce2639a9400f3f7d9
CVE: CVE-2022-2147
Published: 2022-06-23
Description: Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r; https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r
CVE: CVE-2022-32391
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/view_action.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32391.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32391.md
CVE: CVE-2022-32392
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manage_action.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32392.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32392.md
CVE: CVE-2022-32393
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/view_cell.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32393.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32393.md
CVE: CVE-2022-32394
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/view_inmate.php:3
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32394.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32394.md
CVE: CVE-2022-32395
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/manage_crime.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32395.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32395.md
CVE: CVE-2022-32396
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/manage_visit.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32396.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32396.md
CVE: CVE-2022-32397
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/view_visit.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32397.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32397.md
CVE: CVE-2022-32398
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/manage_cell.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32398.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32398.md
CVE: CVE-2022-32399
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/view_crime.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32399.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32399.md
CVE: CVE-2022-32400
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manage_user.php:4.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32400.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32400.md
CVE: CVE-2022-32401
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_privilege.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32401.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32401.md
CVE: CVE-2022-32402
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manage_prison.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32402.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32402.md
CVE: CVE-2022-32403
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_record.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32403.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32403.md
CVE: CVE-2022-32404
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manage_inmate.php:3
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32404.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32404.md
CVE: CVE-2022-32405
Published: 2022-06-24
Description: Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/view_prison.php:4
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32405.md; https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html; https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32405.md
CVE: CVE-2017-20092
Published: 2022-06-24
Description: A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: http://seclists.org/fulldisclosure/2017/Feb/93; https://vuldb.com/?id.97381; http://seclists.org/fulldisclosure/2017/Feb/93
CVE: CVE-2017-20093
Published: 2022-06-24
Description: A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://seclists.org/fulldisclosure/2017/Feb/82; https://vuldb.com/?id.97374; http://seclists.org/fulldisclosure/2017/Feb/82
CVE: CVE-2017-20094
Published: 2022-06-24
Description: A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: http://seclists.org/fulldisclosure/2017/Feb/81; https://vuldb.com/?id.97373; http://seclists.org/fulldisclosure/2017/Feb/81
CVE: CVE-2017-20095
Published: 2022-06-24
Description: A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94, CWE-94
References: http://seclists.org/fulldisclosure/2017/Feb/80; https://vuldb.com/?id.97372; http://seclists.org/fulldisclosure/2017/Feb/80
CVE: CVE-2017-20096
Published: 2022-06-24
Description: A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: http://seclists.org/fulldisclosure/2017/Feb/79; https://vuldb.com/?id.97371; http://seclists.org/fulldisclosure/2017/Feb/79
CVE: CVE-2017-20097
Published: 2022-06-24
Description: A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: http://seclists.org/fulldisclosure/2017/Feb/78; https://vuldb.com/?id.97370; http://seclists.org/fulldisclosure/2017/Feb/78
CVE: CVE-2021-34604
Published: 2022-06-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. It is a duplicate of CVE-2022-22514. Notes: none
CVE: CVE-2022-1965
Published: 2022-06-24
Description: Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
CVSS Score: 8.1 (HIGH)
CWE: CWE-755
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-31802
Published: 2022-06-24
Description: In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-187
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE: CVE-2022-31803
Published: 2022-06-24
Description: In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE: CVE-2022-31804
Published: 2022-06-24
Description: The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-789
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download=
CVE: CVE-2022-31805
Published: 2022-06-24
Description: In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-523
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=
CVE: CVE-2022-31806
Published: 2022-06-24
Description: In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=
CVE: CVE-2022-32136
Published: 2022-06-24
Description: In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32137
Published: 2022-06-24
Description: In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32138
Published: 2022-06-24
Description: In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.
CVSS Score: 8.8 (HIGH)
CWE: CWE-194
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32139
Published: 2022-06-24
Description: In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32140
Published: 2022-06-24
Description: Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32141
Published: 2022-06-24
Description: Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32142
Published: 2022-06-24
Description: Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.
CVSS Score: 8.1 (HIGH)
CWE: CWE-823
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2022-32143
Published: 2022-06-24
Description: In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured on the controller or if remote attacker has previously successfully authenticated himself to the controller. A successful Attack may lead to a denial of service, change of local files, or drain of confidential Information. User interaction is not required
CVSS Score: 8.8 (HIGH)
CWE: CWE-552
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
CVE: CVE-2021-41634
Published: 2022-06-24
Description: A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/; https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
CVE: CVE-2021-41635
Published: 2022-06-24
Description: When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/; https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
CVE: CVE-2021-41636
Published: 2022-06-24
Description: MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, while the access restrictions of the user running the FTP server apply.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/; https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
CVE: CVE-2021-41637
Published: 2022-06-24
Description: Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.
CVSS Score: 7.1 (HIGH)
CWE: CWE-276
References: https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/; https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
CVE: CVE-2021-41638
Published: 2022-06-24
Description: The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/; https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/