deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4855
Published: 2024-05-14
Description: Use after free issue in editcap could cause denial of service via crafted capture file
CVSS Score: 3.6 (LOW)
CWE: CWE-416
References: https://gitlab.com/wireshark/wireshark/-/issues/19782; https://gitlab.com/wireshark/wireshark/-/issues/19783; https://gitlab.com/wireshark/wireshark/-/issues/19784
CVE: CVE-2023-35841
Published: 2024-05-14
Description: Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-782
References: https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html; https://jvn.jp/en/vu/JVNVU93886750/index.html; https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/
CVE: CVE-2023-46280
Published: 2024-05-14
Description: A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 Upd5), SIMATIC NET PC Software V16 (All versions < V16 Update 8), SIMATIC NET PC Software V17 (All versions), SIMATIC NET PC Software V18 (All versions < V18 SP1), SIMATIC NET PC Software V19 (All versions < V19 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PDM V9.2 (All versions < V9.2 SP2 Upd3), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 Upd3), SIMATIC S7-PCT (All versions < V3.5 SP3 Update 6), SIMATIC STEP 7 V5 (All versions < V5.7 SP3), SIMATIC WinCC OA V3.17 (All versions), SIMATIC WinCC OA V3.18 (All versions < V3.18 P025), SIMATIC WinCC OA V3.19 (All versions < V3.19 P010), SIMATIC WinCC Runtime Advanced (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 6), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5), SINAMICS Startdrive (All versions < V19 SP1), SINEC NMS (All versions < V3.0), SINEC NMS (All versions < V3.0 SP1), SINUMERIK ONE virtual (All versions < V6.23), SINUMERIK PLC Programming Tool (All versions < V3.3.12), TIA Portal Cloud Connector (All versions < V2.0), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 4), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 2). The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-331112.html; https://cert-portal.siemens.com/productcert/html/ssa-784301.html; https://cert-portal.siemens.com/productcert/html/ssa-962515.html
CVE: CVE-2023-6812
Published: 2024-05-14
Description: The WP Compress – Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.20.01. This is due to insufficient validation on the redirect url supplied via the 'css' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://plugins.trac.wordpress.org/changeset/3082085/wp-compress-image-optimizer/trunk/fixCss.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/cbbf9fbb-74fd-42eb-a781-2a720fe56b13?source=cve; https://plugins.trac.wordpress.org/changeset/3082085/wp-compress-image-optimizer/trunk/fixCss.php
CVE: CVE-2024-0762
Published: 2024-05-14
Description: Potential buffer overflow 
in unsafe UEFI variable handling 

in Phoenix SecureCore™ for select Intel platforms


This issue affects:


Phoenix 

SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;


Phoenix 

SecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;


Phoenix 

SecureCore™ for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;


Phoenix 

SecureCore™ for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;


Phoenix 

SecureCore™ for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;


Phoenix 

SecureCore™ for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;


Phoenix 

SecureCore™ for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;


Phoenix 

SecureCore™ for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;


Phoenix 

SecureCore™ for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://eclypsium.com/blog/ueficanhazbufferoverflow-widespread-impact-from-vulnerability-in-popular-pc-and-server-firmware/; https://news.ycombinator.com/item?id=40747852; https://phoenixtech.com/phoenix-security-notifications/CVE-2024-0762/
CVE: CVE-2024-0870
Published: 2024-05-14
Description: The YITH WooCommerce Gift Cards plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_mail_status' and 'save_email_settings' functions in all versions up to, and including, 4.12.0. This makes it possible for unauthenticated attackers to modify WooCommerce settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/changeset/3084519/yith-woocommerce-gift-cards/trunk/includes/admin/class-ywgc-admin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/ca1f0dc6-c0bc-4e9f-b3b6-d6274aa7a7db?source=cve; https://plugins.trac.wordpress.org/changeset/3084519/yith-woocommerce-gift-cards/trunk/includes/admin/class-ywgc-admin.php
CVE: CVE-2024-1486
Published: 2024-05-14
Description: Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
CVSS Score: 7.4 (HIGH)
CWE: CWE-732
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-1598
Published: 2024-05-14
Description: Potential buffer overflow 
in unsafe UEFI variable handling 

in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects:

SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://phoenixtech.com/phoenix-security-notifications/cve-2024-1598/; https://www.phoenix.com/security-notifications/cve-2024-1598/
CVE: CVE-2024-1628
Published: 2024-05-14
Description: OS command injection vulnerabilities in GE HealthCare ultrasound devices
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://securityupdate.gehealthcare.com/; https://securityupdate.gehealthcare.com/
CVE: CVE-2024-1913
Published: 2024-05-14
Description: 
An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. 

The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system.

Below are reported vulnerabilities in the Robot Ware versions.

  *  IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 
  *  OmniCore- RobotWare 7 < 7.14


CVSS Score: 7.6 (HIGH)
CWE: CWE-787
References: https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2024-1914
Published: 2024-05-14
Description: An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible.  

The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. 

Below are reported vulnerabilities in the Robot Ware versions. 

* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 
* OmniCore- RobotWare 7 < 7.14
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2024-22267
Published: 2024-05-14
Description: VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.


CVSS Score: 9.3 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE: CVE-2024-22268
Published: 2024-05-14
Description: VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition.


CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE: CVE-2024-22269
Published: 2024-05-14
Description: VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.


CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE: CVE-2024-22270
Published: 2024-05-14
Description: VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.


CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE: CVE-2024-25965
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-73
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-25966
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-241
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-25967
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an execution with unnecessary privileges vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-250
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-25968
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-25969
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without limits or throttling vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-770
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-25970
Published: 2024-05-14
Description: Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to loss of integrity.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2024-26367
Published: 2024-05-14
Description: Cross Site Scripting vulnerability in Evertz microsystems MViP-II Firmware 8.6.5, XPS-EDGE-* Build 1467, evEDGE-EO-* Build 0029, MMA10G-* Build 0498, 570IPG-X19-10G Build 0691 allows a remote attacker to execute arbitrary code via a crafted payload to the login parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cc.com; http://evertz.com; https://wiki.notveg.ninja/blog/CVE-2024-26367/
CVE: CVE-2024-27939
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27940
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27941
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27942
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27943
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload generic files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73, CWE-434
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27944
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73, CWE-434
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27945
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73, CWE-434
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27946
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the 
installation directory of the affected systems. The filename for 
the target file can be specified, thus arbitrary files can be 
overwritten by an attacker with the required privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-27947
Published: 2024-05-14
Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems could allow log messages to be forwarded to a specific client under certain circumstances. An attacker could leverage this vulnerability to forward log messages to a specific compromised client.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/html/ssa-916916.html; https://cert-portal.siemens.com/productcert/html/ssa-916916.html
CVE: CVE-2024-28133
Published: 2024-05-14
Description: 
	
		
		
	
	
		
			
				
					A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root
privileges. 



				


			


		


	



				


			


		


	

CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://cert.vde.com/en/advisories/VDE-2024-019; https://cert.vde.com/en/advisories/VDE-2024-019
CVE: CVE-2024-28134
Published: 2024-05-14
Description: 
	
		
		
	
	
		
			
				
					

	
		
		
	
	
		


			
				
					An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based
management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but the availability can be seriously affected. 











			


		


	

CVSS Score: 7.0 (HIGH)
CWE: CWE-319
References: https://cert.vde.com/en/advisories/VDE-2024-019; https://cert.vde.com/en/advisories/VDE-2024-019
CVE: CVE-2024-28135
Published: 2024-05-14
Description: A low privileged remote attacker can use a command injection vulnerability in the API which performs
remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://cert.vde.com/en/advisories/VDE-2024-019; https://cert.vde.com/en/advisories/VDE-2024-019
CVE: CVE-2024-28136
Published: 2024-05-14
Description: A local attacker with low privileges can use a command injection vulnerability to gain root
privileges due to improper input validation using the OCPP Remote service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://cert.vde.com/en/advisories/VDE-2024-019; https://cert.vde.com/en/advisories/VDE-2024-019
CVE: CVE-2024-28137
Published: 2024-05-14
Description: 
	
		
		
	
	
		
			
				
					

	
		
		
	
	
		


			
				
					A local attacker with low privileges can perform a privilege escalation with an init script due to a  TOCTOU vulnerability.










				


			


		


	

CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://cert.vde.com/en/advisories/VDE-2024-019; https://cert.vde.com/en/advisories/VDE-2024-019
CVE: CVE-2024-28165
Published: 2024-05-14
Description: 
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application


CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://me.sap.com/notes/3431794; https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html; https://me.sap.com/notes/3431794
CVE: CVE-2024-30206
Published: 2024-05-14
Description: A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). Affected SIMATIC RTLS Locating Manager Clients do not properly check the integrity of update files. This could allow an unauthenticated remote attacker to alter update files in transit and trick an authorized user into installing malicious code. 
A successful exploit requires the attacker to be able to modify the communication between server and client on the network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: https://cert-portal.siemens.com/productcert/html/ssa-093430.html; https://cert-portal.siemens.com/productcert/html/ssa-093430.html