deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-4012
Published: 2019-04-15
Description: IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.ibm.com/support/docview.wss?uid=ibm10875490; http://www.securityfocus.com/bid/108038; https://exchange.xforce.ibmcloud.com/vulnerabilities/155886
CVE: CVE-2019-4178
Published: 2019-04-15
Description: IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system. IBM X-Force ID: 158919.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://www.ibm.com/support/docview.wss?uid=ibm10879079; https://exchange.xforce.ibmcloud.com/vulnerabilities/158919; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-4202
Published: 2019-04-15
Description: IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/107908; https://exchange.xforce.ibmcloud.com/vulnerabilities/159123; https://www.ibm.com/support/docview.wss?uid=ibm10880109
CVE: CVE-2019-4203
Published: 2019-04-15
Description: IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://www.securityfocus.com/bid/107905; https://exchange.xforce.ibmcloud.com/vulnerabilities/159124; https://www.ibm.com/support/docview.wss?uid=ibm10880569
CVE: CVE-2019-6609
Published: 2019-04-15
Description: Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.0.0-14.1.0.1, 13.0.0-13.1.1.3, and 12.1.1 HF2-12.1.4, the secureKeyCapable attribute was not set which causes secure vault to not use the F5 hardware support to store the unit key. Instead the unit key is stored in plaintext on disk as would be the case for Z100 systems. Additionally this causes the unit key to be stored in UCS files taken on these platforms.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://support.f5.com/csp/article/K18535734; https://support.f5.com/csp/article/K18535734
CVE: CVE-2019-5516
Published: 2019-04-15
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0762; https://www.vmware.com/security/advisories/VMSA-2019-0006.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0762
CVE: CVE-2019-5517
Published: 2019-04-15
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for these issues involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2019-0006.html; https://www.vmware.com/security/advisories/VMSA-2019-0006.html
CVE: CVE-2019-5520
Published: 2019-04-15
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2019-0006.html; https://www.zerodayinitiative.com/advisories/ZDI-19-369/; https://www.vmware.com/security/advisories/VMSA-2019-0006.html
CVE: CVE-2018-17583
Published: 2019-04-15
Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html; https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing; https://wpvulndb.com/vulnerabilities/9696
CVE: CVE-2018-17584
Published: 2019-04-15
Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html; https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing; https://wpvulndb.com/vulnerabilities/9696
CVE: CVE-2018-17585
Published: 2019-04-15
Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html; https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing; https://wpvulndb.com/vulnerabilities/9696
CVE: CVE-2018-17586
Published: 2019-04-15
Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html; https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing; https://wpvulndb.com/vulnerabilities/9696
CVE: CVE-2018-4008
Published: 2019-04-15
Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0677; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0677
CVE: CVE-2018-4009
Published: 2019-04-15
Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug.
CVSS Score: 7.8 (HIGH)
CWE: CWE-494
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0678; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0678
CVE: CVE-2018-16966
Published: 2019-04-15
Description: There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ansawaf.blogspot.com/2019/04/file-manager-plugin-wordpress-plugin.html; https://wordpress.org/plugins/wp-file-manager/#developers; https://wpvulndb.com/vulnerabilities/9614
CVE: CVE-2018-16967
Published: 2019-04-15
Description: There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/file-manager-plugin-wordpress-plugin.html; https://wordpress.org/plugins/wp-file-manager/#developers; https://wpvulndb.com/vulnerabilities/9614
CVE: CVE-2018-18017
Published: 2019-04-15
Description: XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html; https://docs.google.com/document/d/1rwN4hJkD5TJfCa16rsGwzYhzL-ODd2VLkFnPvAIq4Ys/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html
CVE: CVE-2018-18018
Published: 2019-04-15
Description: SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html; https://docs.google.com/document/d/1rwN4hJkD5TJfCa16rsGwzYhzL-ODd2VLkFnPvAIq4Ys/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html
CVE: CVE-2018-18019
Published: 2019-04-15
Description: XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html; https://docs.google.com/document/d/1rwN4hJkD5TJfCa16rsGwzYhzL-ODd2VLkFnPvAIq4Ys/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html
CVE: CVE-2019-9845
Published: 2019-04-16
Description: madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/madskristensen/Miniblog.Core/blob/master/src/Controllers/BlogController.cs#L142; https://rastating.github.io/miniblog-remote-code-execution/; https://github.com/madskristensen/Miniblog.Core/blob/master/src/Controllers/BlogController.cs#L142
CVE: CVE-2018-18489
Published: 2019-04-16
Description: The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service (HTTP service termination) by modifying the packet size to be higher than the UI limit of 1472.
CVSS Score: 4.9 (MEDIUM)
References: https://youtu.be/VGNEYWR9MgY; https://youtu.be/VGNEYWR9MgY
CVE: CVE-2018-19971
Published: 2019-04-16
Description: JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html; http://seclists.org/fulldisclosure/2019/Mar/34; http://www.securityfocus.com/bid/107518
CVE: CVE-2019-7155
Published: 2019-04-16
Description: An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, if their privileges within the project are different from the group.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/42726; https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE: CVE-2018-13803
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-13817
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16560
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16562
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16564
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16565
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16566
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16567
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16568
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16569
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16570
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16571
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16572
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16573
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16574
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16575
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16576
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16577
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16578
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16579
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16580
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16581
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16582
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16583
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-16584
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-4857
Published: 2019-04-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2017-11427
Published: 2019-04-17
Description: OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations; https://www.kb.cert.org/vuls/id/475445; https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
CVE: CVE-2017-11428
Published: 2019-04-17
Description: OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations; https://www.kb.cert.org/vuls/id/475445; https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
CVE: CVE-2017-11429
Published: 2019-04-17
Description: Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations; https://www.kb.cert.org/vuls/id/475445; https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
CVE: CVE-2017-11430
Published: 2019-04-17
Description: OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations; https://www.kb.cert.org/vuls/id/475445; https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
CVE: CVE-2018-13808
Published: 2019-04-17
Description: A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a Denial-of-Service condition. Successful exploitation requires network access to a vulnerable device. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf
CVE: CVE-2018-13809
Published: 2019-04-17
Description: A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a successful exploitation. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf
CVE: CVE-2018-13810
Published: 2019-04-17
Description: A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. At the time of advisory publication no public exploitation of this vulnerability was known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-559174.pdf