deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-39272
Published: 2022-10-22
Description: Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields `.spec.interval` or `.spec.timeout` (and structured variations of these fields), causing the entire object type to stop being processed. This issue is patched in version 0.35.0. As a workaround, Admission controllers can be employed to restrict the values that can be used for fields `.spec.interval` and `.spec.timeout`, however upgrading to the latest versions is still the recommended mitigation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://github.com/fluxcd/flux2/security/advisories/GHSA-f4p5-x4vc-mh4v; https://github.com/kubernetes/apimachinery/issues/131; https://github.com/fluxcd/flux2/security/advisories/GHSA-f4p5-x4vc-mh4v
CVE: CVE-2021-26727
Published: 2022-10-24
Description: Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-121, CWE-77, CWE-787
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26727/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26728
Published: 2022-10-24
Description: Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-121, CWE-77, CWE-787
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26728/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26729
Published: 2022-10-24
Description: Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-121, CWE-77, CWE-787
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26729/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26730
Published: 2022-10-24
Description: A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26730/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26731
Published: 2022-10-24
Description: Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94, CWE-121, CWE-77, CWE-787
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26731/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26732
Published: 2022-10-24
Description: A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26732/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-26733
Published: 2022-10-24
Description: A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26733/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-42010
Published: 2022-10-24
Description: Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116, CWE-116
References: http://www.openwall.com/lists/oss-security/2022/10/23/2; https://lists.apache.org/thread/j65nwr8n7jchngwqptzh100drcr4ry2q; http://www.openwall.com/lists/oss-security/2022/10/23/2
CVE: CVE-2021-44467
Published: 2022-10-24
Description: A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44467/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-44769
Published: 2022-10-24
Description: An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44769/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-44776
Published: 2022-10-24
Description: A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44776/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-45925
Published: 2022-10-24
Description: Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-45925/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-46279
Published: 2022-10-24
Description: Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-384, CWE-613, CWE-384, CWE-613
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-46279/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2021-46848
Published: 2022-10-24
Description: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-193, CWE-193
References: https://bugs.gentoo.org/866237; https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a[PII_REDACTED]70c2df047ff207aeb5; https://gitlab.com/gnutls/libtasn1/-/issues/32
CVE: CVE-2021-46849
Published: 2022-10-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2021-46850
Published: 2022-10-24
Description: myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-88, CWE-88
References: https://blog.talosintelligence.com/2021/06/necro-python-bot-adds-new-tricks.html; https://github.com/myvesta/vesta/commit/7991753ab7c5c568768028fb77554db8ea149f17; https://github.com/myvesta/vesta/releases/tag/0.9.8-26-43
CVE: CVE-2021-4228
Published: 2022-10-24
Description: Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/; https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-4228/; https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE: CVE-2022-36368
Published: 2022-10-24
Description: Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.ipfire.org/post/ipfire-2-27-core-update-170-released; https://bugzilla.ipfire.org/show_bug.cgi?id=12925; https://github.com/ipfire/ipfire-2.x
CVE: CVE-2022-38117
Published: 2022-10-24
Description: Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://www.twcert.org.tw/tw/cp-132-6630-d4d2f-1.html; https://www.twcert.org.tw/tw/cp-132-6630-d4d2f-1.html
CVE: CVE-2022-39305
Published: 2022-10-24
Description: Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This issue is patched in 2.5.4b. There are no known workarounds.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/flipped-aurora/gin-vue-admin/blob/main/server/utils/breakpoint_continue.go; https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-wrmq-4v4c-gxp2; https://github.com/flipped-aurora/gin-vue-admin/blob/main/server/utils/breakpoint_continue.go
CVE: CVE-2022-39313
Published: 2022-10-24
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 4.10.17, and prior to 5.2.8 on the 5.x branch, crash when a file download request is received with an invalid byte range, resulting in a Denial of Service. This issue has been patched in versions 4.10.17, and 5.2.8. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284, CWE-1284
References: https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3; https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3
CVE: CVE-2022-39314
Published: 2022-10-24
Description: Kirby is a flat-file CMS. In versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, Kirby is subject to user enumeration due to Improper Restriction of Excessive Authentication Attempts. This vulnerability affects you only if you are using the `code` or `password-reset` auth method with the `auth.methods` option or if you have enabled the `debug` option in production. By using two or more IP addresses and multiple login attempts, valid user accounts will lock, but invalid accounts will not, leading to account enumeration. This issue has been patched in versions 3.5.8.2, 3.6.6.2, 3.7.5.1,  and 3.8.1.  If you cannot update immediately, you can work around the issue by setting the `auth.methods` option to `password`, which disables the code-based login and password reset forms.
CVSS Score: 3.7 (LOW)
CWE: CWE-307, CWE-307
References: https://github.com/getkirby/kirby/security/advisories/GHSA-43qq-qw4x-28f8; https://github.com/getkirby/kirby/security/advisories/GHSA-43qq-qw4x-28f8
CVE: CVE-2022-3676
Published: 2022-10-24
Description: In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-843, CWE-843
References: https://github.com/eclipse-openj9/openj9/pull/16122; https://github.com/eclipse/omr/pull/6773; https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/389
CVE: CVE-2022-40690
Published: 2022-10-24
Description: Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN78862034/index.html; https://www.bookstackapp.com/blog/bookstack-release-v22-09/; https://www.bookstackapp.com/docs/admin/security/#using-bookstack-content-externally
CVE: CVE-2022-40984
Published: 2022-10-24
Description: Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product to crash by processing a long file name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://cdn.aff.yokogawa.com/8/756/details/Vulnerability_in_YOKOGAWA_application_software_WTViewerE_r0_e.pdf; https://jvn.jp/en/vu/JVNVU99955870/index.html; https://cdn.aff.yokogawa.com/8/756/details/Vulnerability_in_YOKOGAWA_application_software_WTViewerE_r0_e.pdf
CVE: CVE-2022-41796
Published: 2022-10-24
Description: Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://jvn.jp/en/jp/JVN40620121/index.html; https://www.sony.jp/support/audiosoftware/contenttransfer/; https://jvn.jp/en/jp/JVN40620121/index.html
CVE: CVE-2022-41797
Published: 2022-10-24
Description: Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://apps.apple.com/jp/app/lemon8/id[PII_REDACTED]; https://jvn.jp/en/jp/JVN10921428/index.html; https://play.google.com/store/apps/details?id=com.bd.nproject&hl=ja&gl=US
CVE: CVE-2022-41799
Published: 2022-10-24
Description: Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN00845253/index.html; https://weseek.co.jp/en/news/2022/10/07/growi-private-page-can-be-viewed/; https://jvn.jp/en/jp/JVN00845253/index.html
CVE: CVE-2022-41986
Published: 2022-10-24
Description: Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions.
CVSS Score: 7.5 (HIGH)
References: https://jvn.jp/en/jp/JVN74534998/index.html; https://play.google.com/store/apps/details?id=jp.ad.iij.smartkey2; https://jvn.jp/en/jp/JVN74534998/index.html
CVE: CVE-2022-43677
Published: 2022-10-24
Description: In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/free5gc/free5gc/issues/402; https://www.trendmicro.com/en_us/research/23/j/asn1-vulnerabilities-in-5g-cores.html; https://github.com/free5gc/free5gc/issues/402
CVE: CVE-2022-43680
Published: 2022-10-24
Description: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2023/12/28/5; http://www.openwall.com/lists/oss-security/2024/01/03/5; https://github.com/libexpat/libexpat/issues/649
CVE: CVE-2022-27622
Published: 2022-10-25
Description: Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vectors.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918
References: https://www.synology.com/security/advisory/Synology_SA_22_18; https://www.synology.com/security/advisory/Synology_SA_22_18
CVE: CVE-2022-27623
Published: 2022-10-25
Description: Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.
CVSS Score: 7.4 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.synology.com/security/advisory/Synology_SA_22_18; https://www.synology.com/security/advisory/Synology_SA_22_18
CVE: CVE-2022-27804
Published: 2022-10-25
Description: An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1567; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1567
CVE: CVE-2022-27805
Published: 2022-10-25
Description: An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted network request can lead to arbitrary XCMD execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1552; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1552
CVE: CVE-2022-29472
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1566; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1566
CVE: CVE-2022-29475
Published: 2022-10-25
Description: An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-294
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1553; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1553
CVE: CVE-2022-29477
Published: 2022-10-25
Description: An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP header can lead to authentication bypass. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1554; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1554
CVE: CVE-2022-29520
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send an XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-489, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1561; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1561
CVE: CVE-2022-29851
Published: 2022-10-25
Description: documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://packetstormsecurity.com/files/168242/OX-App-Suite-Cross-Site-Scripting-Command-Injection.html; https://packetstormsecurity.com/files/168242/OX-App-Suite-Cross-Site-Scripting-Command-Injection.html