deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-14664
Published: 2019-08-05
Description: In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, he unknowingly leaks the plaintext of the encrypted message part(s) back to the attacker. This attack variant bypasses protection mechanisms implemented after the "EFAIL" attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHC5WDQ47FQSL5CTGQUYIHVC3RNZ7UH5/
CVE: CVE-2019-14667
Published: 2019-08-05
Description: Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/commit/15d4d185bbedf2bb9db4a8fa2ccf9fc359a06194; https://github.com/firefly-iii/firefly-iii/commit/427de0594d05a8222f55b2894311e648ba1be991; https://github.com/firefly-iii/firefly-iii/issues/2363
CVE: CVE-2019-14668
Published: 2019-08-05
Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the transaction description field. The JavaScript code is executed during deletion of a transaction link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/commit/3ad4e04e2ae50e60564b60b68dfac083e5684882; https://github.com/firefly-iii/firefly-iii/issues/2364; https://github.com/firefly-iii/firefly-iii/commit/3ad4e04e2ae50e60564b60b68dfac083e5684882
CVE: CVE-2019-14669
Published: 2019-08-05
Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/commit/2ddf48f15cbdbb475221c299872420f625c3bc3f; https://github.com/firefly-iii/firefly-iii/issues/2366; https://github.com/firefly-iii/firefly-iii/commit/2ddf48f15cbdbb475221c299872420f625c3bc3f
CVE: CVE-2019-14670
Published: 2019-08-05
Description: Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name field. The JavaScript code is executed during rule-from-bill creation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/commit/692b256f3f6d9eab992a72eb042844220b314054; https://github.com/firefly-iii/firefly-iii/issues/2365; https://github.com/firefly-iii/firefly-iii/commit/692b256f3f6d9eab992a72eb042844220b314054
CVE: CVE-2019-14671
Published: 2019-08-05
Description: Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://github.com/firefly-iii/firefly-iii/commit/e80d616ef4397e6e764f6b7b7a5b[PII_REDACTED]3c; https://github.com/firefly-iii/firefly-iii/issues/2367; https://github.com/firefly-iii/firefly-iii/commit/e80d616ef4397e6e764f6b7b7a5b[PII_REDACTED]3c
CVE: CVE-2019-14672
Published: 2019-08-05
Description: Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability name field. The JavaScript code is executed upon an error condition during a visit to the account show page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/firefly-iii/firefly-iii/commit/8717f469b10e9f7e1547c6f70f7d24e1359d28d4; https://github.com/firefly-iii/firefly-iii/issues/2370; https://github.com/firefly-iii/firefly-iii/commit/8717f469b10e9f7e1547c6f70f7d24e1359d28d4
CVE: CVE-2016-10776
Published: 2019-08-06
Description: cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10777
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10778
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10779
Published: 2019-08-06
Description: cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0006-full-disclosure/; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10780
Published: 2019-08-06
Description: cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10781
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10782
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10783
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10784
Published: 2019-08-06
Description: cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10785
Published: 2019-08-06
Description: cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10786
Published: 2019-08-06
Description: cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10787
Published: 2019-08-06
Description: The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10788
Published: 2019-08-06
Description: cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10789
Published: 2019-08-06
Description: cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10790
Published: 2019-08-06
Description: cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2019-14690
Published: 2019-08-06
Description: AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/adplug/adplug/issues/85; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
CVE: CVE-2019-14691
Published: 2019-08-06
Description: AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/adplug/adplug/issues/86; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
CVE: CVE-2019-14692
Published: 2019-08-06
Description: AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/adplug/adplug/issues/87; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
CVE: CVE-2016-10791
Published: 2019-08-06
Description: cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-255
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10792
Published: 2019-08-06
Description: cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10793
Published: 2019-08-06
Description: cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10794
Published: 2019-08-06
Description: cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10795
Published: 2019-08-06
Description: cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/60+Change+Log; https://documentation.cpanel.net/display/CL/60+Change+Log
CVE: CVE-2016-10796
Published: 2019-08-06
Description: cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
CVSS Score: 3.3 (LOW)
CWE: CWE-275
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10797
Published: 2019-08-06
Description: cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2019-14695
Published: 2019-08-06
Description: A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fortiguard.com/zeroday/FG-VD-19-102; https://wordpress.org/plugins/popup-builder/#developers; https://wpvulndb.com/vulnerabilities/9495
CVE: CVE-2019-14346
Published: 2019-08-06
Description: Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/153989/Adive-Framework-2.0.7-Cross-Site-Request-Forgery.html; https://hackpuntes.com/cve-2019-14346-adive-framework-2-0-7-cross-site-request-forgery/; https://www.adive.es/
CVE: CVE-2019-14696
Published: 2019-08-06
Description: Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153984/Open-School-3.0-Community-Edition-2.3-Cross-Site-Scripting.html; https://open-school.org; https://pastebin.com/AgxqdbAQ
CVE: CVE-2019-14697
Published: 2019-08-06
Description: musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2019/08/06/4; https://security.gentoo.org/glsa/202003-13; https://www.openwall.com/lists/musl/2019/08/06/1
CVE: CVE-2019-12950
Published: 2019-08-06
Description: An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsteampassnet/TeamPass/issues/2638; https://github.com/nilsteampassnet/TeamPass/releases; https://github.com/nilsteampassnet/TeamPass/issues/2638
CVE: CVE-2019-14347
Published: 2019-08-06
Description: Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425
References: http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html; https://github.com/ferdinandmartin/adive-php; https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/
CVE: CVE-2019-13143
Published: 2019-08-06
Description: An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the lock. The user ID, name, and MAC address are trivially obtained from APIs found within the Android or iOS application. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over to the attacker's account. Thus rendering the lock completely inaccessible to the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://blog.securelayer7.net/fb50-smart-lock-vulnerability-disclosure/; http://blog.securelayer7.net/fb50-smart-lock-vulnerability-disclosure/
CVE: CVE-2019-13104
Published: 2019-08-06
Description: In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.html; https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75
CVE: CVE-2019-14473
Published: 2019-08-06
Description: eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. Consequently, a valid guest level or user level account can create a new admin level account, read the service messages, clear the system protocol or modify/delete internal programs, etc. pp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://psytester.github.io/CVE-2019-14473; https://psytester.github.io/CVE-2019-14473
CVE: CVE-2019-2386
Published: 2019-08-06
Description: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB Server v4.0 versions prior to 4.0.9; MongoDB Server v3.6 versions prior to 3.6.13 and MongoDB Server v3.4 versions prior to 3.4.22.

Workaround: 
After deleting one or more users, restart any nodes which may have had active user authorization sessions.

Refrain from creating user accounts with the same name as previously deleted accounts.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285, CWE-613
References: https://jira.mongodb.org/browse/SERVER-38984; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0829; https://jira.mongodb.org/browse/SERVER-38984
CVE: CVE-2019-5994
Published: 2019-08-06
Description: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0 and earlier, EOS M10 firmware version 1.1.0 and earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via SendObjectInfo command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/vu/JVNVU97511331/index.html; https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html; https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/
CVE: CVE-2019-5995
Published: 2019-08-06
Description: Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0 and earlier, EOS M10 firmware version 1.1.0 and earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier. A successful exploitation may result in a specially crafted firmware update or unofficial firmware update being applied without user's consent via unspecified vector.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://jvn.jp/en/vu/JVNVU97511331/index.html; https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html; https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/