deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2450
Published: 2019-11-07
Description: The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-916
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631; https://security-tracker.debian.org/tracker/CVE-2010-2450; https://todos.internet2.edu/browse/SSPCPP-106
CVE: CVE-2010-2476
Published: 2019-11-07
Description: syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481; https://security-tracker.debian.org/tracker/CVE-2010-2476; https://www.openwall.com/lists/oss-security/2010/06/30/15
CVE: CVE-2013-1425
Published: 2019-11-07
Description: ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://github.com/elmar/ldap-git-backup/commit/a90f3217fce87962db82d212f73af[PII_REDACTED]4; https://security-tracker.debian.org/tracker/CVE-2013-1425; https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1096253.html
CVE: CVE-2013-1426
Published: 2019-11-07
Description: Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1153423; https://mahara.org/interaction/forum/topic.php?id=5365; https://security-tracker.debian.org/tracker/CVE-2013-1426
CVE: CVE-2018-18674
Published: 2019-11-07
Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-653a2b5a93ed2ca9b8c809ba723638c1; https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172; https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0
CVE: CVE-2019-18819
Published: 2019-11-07
Description: Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x[PII_REDACTED]0003a7.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html; https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE: CVE-2019-18820
Published: 2019-11-07
Description: Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x[PII_REDACTED]001a78.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html; https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE: CVE-2019-18821
Published: 2019-11-07
Description: Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x[PII_REDACTED]000053.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html; https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE: CVE-2007-3732
Published: 2019-11-07
Description: In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that "current" references work. Without this, "current" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.
CVSS Score: 5.5 (MEDIUM)
References: https://access.redhat.com/security/cve/cve-2007-3732; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-3732; https://security-tracker.debian.org/tracker/CVE-2007-3732
CVE: CVE-2007-3915
Published: 2019-11-07
Description: Mondo 2.24 has insecure handling of temporary files.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-668
References: https://security-tracker.debian.org/tracker/CVE-2007-3915; https://security-tracker.debian.org/tracker/CVE-2007-3915
CVE: CVE-2007-5743
Published: 2019-11-07
Description: viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696; https://security-tracker.debian.org/tracker/CVE-2007-5743; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416696
CVE: CVE-2013-1429
Published: 2019-11-07
Description: Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/lintian/+bug/1169636; https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1429.html; https://security-tracker.debian.org/tracker/CVE-2013-1429
CVE: CVE-2013-1751
Published: 2019-11-07
Description: TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securitytracker.com/id/1028149; https://security-tracker.debian.org/tracker/CVE-2013-1751; https://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2013-1751
CVE: CVE-2019-18818
Published: 2019-11-07
Description: strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: http://packetstormsecurity.com/files/163939/Strapi-3.0.0-beta-Authentication-Bypass.html; http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html; http://packetstormsecurity.com/files/165896/Strapi-CMS-3.0.0-beta.17.4-Privilege-Escalation.html
CVE: CVE-2007-6745
Published: 2019-11-07
Description: clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2012/03/29/2; https://access.redhat.com/security/cve/cve-2007-6745; https://security-tracker.debian.org/tracker/CVE-2007-6745
CVE: CVE-2008-3278
Published: 2019-11-07
Description: frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1188
References: https://access.redhat.com/security/cve/cve-2008-3278; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278; https://security-tracker.debian.org/tracker/CVE-2008-3278
CVE: CVE-2013-1771
Published: 2019-11-07
Description: The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2013/02/26/10; https://security-tracker.debian.org/tracker/CVE-2013-1771; http://www.openwall.com/lists/oss-security/2013/02/26/10
CVE: CVE-2013-1809
Published: 2019-11-07
Description: Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2013/03/03/4; https://access.redhat.com/security/cve/cve-2013-1809; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1809
CVE: CVE-2013-1811
Published: 2019-11-07
Description: An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2015/dsa-3120; http://www.openwall.com/lists/oss-security/2013/03/03/6; http://www.openwall.com/lists/oss-security/2013/03/04/9
CVE: CVE-2008-5083
Published: 2019-11-08
Description: In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/cve-2008-5083; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5083; https://access.redhat.com/security/cve/cve-2008-5083
CVE: CVE-2008-7272
Published: 2019-11-08
Description: FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users’s private key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386; https://security-tracker.debian.org/tracker/CVE-2008-7272; https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect
CVE: CVE-2008-7291
Published: 2019-11-08
Description: gri before 2.12.18 generates temporary files in an insecure way.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668
References: https://security-tracker.debian.org/tracker/CVE-2008-7291; https://security-tracker.debian.org/tracker/CVE-2008-7291
CVE: CVE-2019-18835
Published: 2019-11-08
Description: Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://github.com/matrix-org/synapse/pull/6262; https://github.com/matrix-org/synapse/releases/tag/v1.5.0; https://github.com/matrix-org/synapse/pull/6262
CVE: CVE-2019-15005
Published: 2019-11-08
Description: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. A vulnerable version of the plugin is included with Bitbucket Server / Data Center before 6.6.0, Confluence Server / Data Center before 7.0.1, Jira Server / Data Center before 8.3.2, Crowd / Crowd Data Center before 3.6.0, Fisheye before 4.7.2, Crucible before 4.7.2, and Bamboo before 6.10.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://herolab.usd.de/security-advisories/usd-2019-0016/; https://jira.atlassian.com/browse/BAM-20647; https://herolab.usd.de/security-advisories/usd-2019-0016/
CVE: CVE-2013-1820
Published: 2019-11-08
Description: tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=918233; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1820; https://security-tracker.debian.org/tracker/CVE-2013-1820
CVE: CVE-2019-10219
Published: 2019-11-08
Description: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2020:0159; https://access.redhat.com/errata/RHSA-2020:0160; https://access.redhat.com/errata/RHSA-2020:0161
CVE: CVE-2019-10222
Published: 2019-11-08
Description: A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10222; https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html; https://tracker.ceph.com/issues/40018
CVE: CVE-2019-14824
Published: 2019-11-08
Description: A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://access.redhat.com/errata/RHSA-2019:3981; https://access.redhat.com/errata/RHSA-2020:0464; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824
CVE: CVE-2019-14860
Published: 2019-11-08
Description: It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-942
References: https://access.redhat.com/errata/RHSA-2019:3892; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14860; https://access.redhat.com/errata/RHSA-2019:3892
CVE: CVE-2019-3866
Published: 2019-11-08
Description: An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3866; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3866
CVE: CVE-2013-1889
Published: 2019-11-08
Description: mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2013/03/23/1; https://exchange.xforce.ibmcloud.com/vulnerabilities/83035; https://security-tracker.debian.org/tracker/CVE-2013-1889
CVE: CVE-2019-13557
Published: 2019-11-08
Description: In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01; https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01
CVE: CVE-2019-16205
Published: 2019-11-08
Description: A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-864; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-864
CVE: CVE-2019-16206
Published: 2019-11-08
Description: The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-311, CWE-532
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865
CVE: CVE-2019-16207
Published: 2019-11-08
Description: Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-866; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-866
CVE: CVE-2019-16208
Published: 2019-11-08
Description: Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.).
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-867; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-867
CVE: CVE-2019-16209
Published: 2019-11-08
Description: A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-868; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-868
CVE: CVE-2019-16210
Published: 2019-11-08
Description: Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-311, CWE-532
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-869; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-869
CVE: CVE-2019-17327
Published: 2019-11-08
Description: JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197
CVE: CVE-2019-17661
Published: 2019-11-08
Description: A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers. By choosing formula code as his first or last name, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-csv-injection.html; https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-csv-injection.html
CVE: CVE-2019-18623
Published: 2019-11-08
Description: Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://energycap.freshdesk.com/helpdesk/attachments/[PII_REDACTED]3; https://energycap.freshdesk.com/support/solutions/articles/[PII_REDACTED]7-2019-october-24-security-incident-notification-issue-with-public-dashboards-found-and-resolved; https://energycap.freshdesk.com/helpdesk/attachments/[PII_REDACTED]3
CVE: CVE-2019-12408
Published: 2019-11-08
Description: It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow Arrays are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
CVSS Score: 7.5 (HIGH)
CWE: CWE-909
References: https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269%40%3Cdev.arrow.apache.org%3E; https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269%40%3Cdev.arrow.apache.org%3E
CVE: CVE-2019-12410
Published: 2019-11-08
Description: While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
CVSS Score: 7.5 (HIGH)
CWE: CWE-909
References: http://www.openwall.com/lists/oss-security/2019/11/08/1; https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269%40%3Cdev.arrow.apache.org%3E; https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269%40%3Cdev.arrow.apache.org%3E
CVE: CVE-2019-3425
Published: 2019-11-08
Description: The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
CVE: CVE-2019-3426
Published: 2019-11-08
Description: The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
CVE: CVE-2019-13531
Published: 2019-11-08
Description: In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be bypassed, allowing for inauthentic instruments to connect to the generator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-287
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-01; https://www.us-cert.gov/ics/advisories/icsma-19-311-01
CVE: CVE-2019-13535
Published: 2019-11-08
Description: In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-693, CWE-732
References: https://global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-01; https://www.us-cert.gov/ics/advisories/icsma-19-311-01