deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-42826
Published: 2023-02-27
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://security.gentoo.org/glsa/202305-32; https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-42833
Published: 2023-02-27
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42838
Published: 2023-02-27
Description: An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed.
CVSS Score: 3.3 (LOW)
CWE: CWE-672
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-46704
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213532; https://support.apple.com/en-us/HT213533; https://support.apple.com/en-us/HT213534
CVE: CVE-2022-46705
Published: 2023-02-27
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2023/11/15/1; https://support.apple.com/en-us/HT213530; https://support.apple.com/en-us/HT213532
CVE: CVE-2022-46712
Published: 2023-02-27
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app may be able to cause unexpected system termination or potentially execute code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-46713
Published: 2023-02-27
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213493; https://support.apple.com/en-us/HT213494
CVE: CVE-2022-46723
Published: 2023-02-27
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A remote user may be able to write arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213493; https://support.apple.com/en-us/HT213494; https://support.apple.com/en-us/HT213493
CVE: CVE-2023-23493
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password.
CVSS Score: 3.3 (LOW)
CWE: CWE-287
References: https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213604
CVE: CVE-2023-23496
Published: 2023-02-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/HT213531; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213600
CVE: CVE-2023-23497
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213603; https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23498
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213598; https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213606
CVE: CVE-2023-23499
Published: 2023-02-27
Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213603
CVE: CVE-2023-23500
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213598; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-23501
Published: 2023-02-27
Description: The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23502
Published: 2023-02-27
Description: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213604
CVE: CVE-2023-23503
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-288
References: https://support.apple.com/en-us/HT213598; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-23504
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213598; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-23505
Published: 2023-02-27
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s contacts.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://support.apple.com/en-us/HT213598; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213603
CVE: CVE-2023-23506
Published: 2023-02-27
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23507
Published: 2023-02-27
Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213604
CVE: CVE-2023-23508
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213603; https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23510
Published: 2023-02-27
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access a user’s Safari history.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23511
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213604
CVE: CVE-2023-23512
Published: 2023-02-27
Description: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23513
Published: 2023-02-27
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213603; https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23514
Published: 2023-02-27
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213633; https://support.apple.com/en-us/HT213635; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23517
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213600; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-23518
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213600; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-23519
Published: 2023-02-27
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing an image may lead to a denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23520
Published: 2023-02-27
Description: A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23522
Published: 2023-02-27
Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/HT213633; https://support.apple.com/en-us/HT213633
CVE: CVE-2023-23524
Published: 2023-02-27
Description: A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 and iPadOS 16.3.1, watchOS 9.3.1, macOS Ventura 13.2.1. Processing a maliciously crafted certificate may lead to a denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://support.apple.com/en-us/HT213632; https://support.apple.com/en-us/HT213633; https://support.apple.com/en-us/HT213634
CVE: CVE-2023-23529
Published: 2023-02-27
Description: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://support.apple.com/en-us/HT213633; https://support.apple.com/en-us/HT213635; https://support.apple.com/en-us/HT213638
CVE: CVE-2023-23530
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213606; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-23531
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213606; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-24258
Published: 2023-02-27
Description: SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-1-7-SPIP-4-0-9-et-SPIP-3-2-17.html; https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md; https://www.debian.org/security/2023/dsa-5325
CVE: CVE-2023-26041
Published: 2023-02-27
Description: Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to 15.0.3. There are no workaround available.

CVSS Score: 2.6 (LOW)
CWE: CWE-359, CWE-668
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf; https://github.com/nextcloud/spreed/pull/8515; https://hackerone.com/reports/1784310
CVE: CVE-2023-26043
Published: 2023-02-27
Description: GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. GeoNode is vulnerable to an XML External Entity (XXE) injection in the style upload functionality of GeoServer leading to Arbitrary File Read. This issue has been patched in version 4.0.3.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://github.com/GeoNode/geonode/commit/2fdfe919f299b21f1609bf898f9dcfde58770ac0; https://github.com/GeoNode/geonode/security/advisories/GHSA-mcmc-c59m-pqq8; https://github.com/GeoNode/geonode/commit/2fdfe919f299b21f1609bf898f9dcfde58770ac0
CVE: CVE-2023-1055
Published: 2023-02-27
Description: A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=2173517#c0; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZOYQ5TCV6ZEPMDV4CSLK3KINAAO4SRI/; https://bugzilla.redhat.com/show_bug.cgi?id=2173517#c0
CVE: CVE-2015-10086
Published: 2023-02-28
Description: A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is fa0d9bcf81c711a88172ad0d37a842f029ac3782. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-221808.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/OpenCycleCompass/server-php/commit/fa0d9bcf81c711a88172ad0d37a842f029ac3782; https://vuldb.com/?ctiid.221808; https://vuldb.com/?id.221808
CVE: CVE-2023-1081
Published: 2023-02-28
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/29d418461d8407688f2720e7b4be915e03fc16c1; https://huntr.dev/bounties/cf59deed-9d43-4552-acfd-43f38f3aabba; https://github.com/microweber/microweber/commit/29d418461d8407688f2720e7b4be915e03fc16c1
CVE: CVE-2020-36652
Published: 2023-02-28
Description: Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files.

This issue affects Hitachi Automation Director: 

from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00.

CVSS Score: 6.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-106/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-106/index.html
CVE: CVE-2022-3884
Published: 2023-02-28
Description: Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.


CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html
CVE: CVE-2022-4895
Published: 2023-02-28
Description: Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.


CVSS Score: 8.6 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-105/index.html
CVE: CVE-2021-22283
Published: 2023-02-28
Description: Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.


CVSS Score: 6.2 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch