deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0385
Published: 2016-09-01
Description: Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 3.1 (LOW)
CWE: CWE-119, CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI60026; http://www-01.ibm.com/support/docview.wss?uid=swg21982588; http://www.securityfocus.com/bid/92505
CVE: CVE-2016-2954
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21988990; http://www.securityfocus.com/bid/92543; http://www-01.ibm.com/support/docview.wss?uid=swg21988990
CVE: CVE-2016-2956
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21988990; http://www.securityfocus.com/bid/92542; http://www-01.ibm.com/support/docview.wss?uid=swg21988990
CVE: CVE-2016-2995
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-3005, and CVE-2016-3010.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929; http://www-01.ibm.com/support/docview.wss?uid=swg21988991; http://www.securityfocus.com/bid/92576
CVE: CVE-2016-2997
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-3005, and CVE-2016-3010.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929; http://www-01.ibm.com/support/docview.wss?uid=swg21988991; http://www.securityfocus.com/bid/92580
CVE: CVE-2016-2998
Published: 2016-09-01
Description: Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929; http://www-01.ibm.com/support/docview.wss?uid=swg21988991; http://www.securityfocus.com/bid/92578
CVE: CVE-2016-3005
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3010.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929; http://www-01.ibm.com/support/docview.wss?uid=swg21988991; http://www.securityfocus.com/bid/92581
CVE: CVE-2016-3008
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21988990; http://www.securityfocus.com/bid/92541; http://www-01.ibm.com/support/docview.wss?uid=swg21988990
CVE: CVE-2016-3010
Published: 2016-09-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929; http://www-01.ibm.com/support/docview.wss?uid=swg21988991; http://www.securityfocus.com/bid/92583
CVE: CVE-2016-5047
Published: 2016-09-01
Description: NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://kb.netapp.com/support/index?page=content&id=9010100; http://www.securityfocus.com/bid/92685; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2016-4264
Published: 2016-09-01
Description: The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: http://legalhackers.com/advisories/Adobe-ColdFusion-11-XXE-Exploit-CVE-2016-4264.txt; http://www.securityfocus.com/archive/1/539374/100/0/threaded; http://www.securityfocus.com/bid/92684
CVE: CVE-2016-6298
Published: 2016-09-01
Description: The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92729; https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba[PII_REDACTED]d8e5a7ba; https://github.com/latchset/jwcrypto/issues/65
CVE: CVE-2016-1470
Published: 2016-09-02
Description: Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps; http://www.securityfocus.com/bid/92709; http://www.securitytracker.com/id/1036722
CVE: CVE-2016-1471
Published: 2016-09-02
Description: Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps1; http://www.securityfocus.com/bid/92713; http://www.securitytracker.com/id/1036723
CVE: CVE-2016-1472
Published: 2016-09-02
Description: The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps2; http://www.securityfocus.com/bid/92707; http://www.securitytracker.com/id/1036724
CVE: CVE-2016-1473
Published: 2016-09-02
Description: Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps3; http://www.securityfocus.com/bid/92710; http://www.securitytracker.com/id/1036711
CVE: CVE-2016-6376
Published: 2016-09-02
Description: The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2; http://www.securityfocus.com/bid/92716; http://www.securitytracker.com/id/1036720
CVE: CVE-2016-4848
Published: 2016-09-02
Description: Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN28386124/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000140; http://www.securityfocus.com/bid/92537
CVE: CVE-2016-4851
Published: 2016-09-02
Description: Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN42262137/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000152; http://www.securityfocus.com/bid/92597
CVE: CVE-2016-4853
Published: 2016-09-02
Description: AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN85213412/995740/index.html; http://jvn.jp/en/jp/JVN85213412/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000154
CVE: CVE-2016-6483
Published: 2016-09-02
Description: The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt; http://www.securityfocus.com/bid/92350; http://www.securitytracker.com/id/1036553
CVE: CVE-2016-0772
Published: 2016-09-02
Description: The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html; http://rhn.redhat.com/errata/RHSA-2016-1626.html; http://rhn.redhat.com/errata/RHSA-2016-1627.html
CVE: CVE-2016-4952
Published: 2016-09-02
Description: QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/05/23/1; http://www.openwall.com/lists/oss-security/2016/05/23/4; http://www.ubuntu.com/usn/USN-3047-1
CVE: CVE-2016-5105
Published: 2016-09-02
Description: The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-908
References: http://www.openwall.com/lists/oss-security/2016/05/25/5; http://www.openwall.com/lists/oss-security/2016/05/26/7; http://www.ubuntu.com/usn/USN-3047-1
CVE: CVE-2016-5106
Published: 2016-09-02
Description: The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/05/25/6; http://www.openwall.com/lists/oss-security/2016/05/26/8; http://www.ubuntu.com/usn/USN-3047-1
CVE: CVE-2016-5107
Published: 2016-09-02
Description: The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/05/25/7; http://www.openwall.com/lists/oss-security/2016/05/26/9; http://www.securityfocus.com/bid/90874
CVE: CVE-2016-5636
Published: 2016-09-02
Description: Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html; http://rhn.redhat.com/errata/RHSA-2016-2586.html; http://www.openwall.com/lists/oss-security/2016/06/15/15
CVE: CVE-2016-5699
Published: 2016-09-02
Description: CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-113
References: http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html; http://rhn.redhat.com/errata/RHSA-2016-1626.html
CVE: CVE-2016-5879
Published: 2016-09-02
Description: MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT16174; http://www-01.ibm.com/support/docview.wss?uid=swg21987697; http://www.securityfocus.com/bid/92538
CVE: CVE-2016-6893
Published: 2016-09-02
Description: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.debian.org/security/2016/dsa-3668; http://www.securityfocus.com/bid/92731; http://www.securitytracker.com/id/1036728
CVE: CVE-2016-7123
Published: 2016-09-02
Description: Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/92732; http://www.securitytracker.com/id/1037160; https://bugs.launchpad.net/bugs/1614841
CVE: CVE-2015-5719
Published: 2016-09-03
Description: app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/92740; https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699; https://www.circl.lu/advisory/CVE-2015-5719/
CVE: CVE-2015-5720
Published: 2016-09-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92738; https://github.com/MISP/MISP/commit/812ac878c3645c02e2a[PII_REDACTED]18424cbd4cf; https://www.circl.lu/advisory/CVE-2015-5720/
CVE: CVE-2015-5721
Published: 2016-09-03
Description: Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.securityfocus.com/bid/92739; https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56; https://www.circl.lu/advisory/CVE-2015-5721/
CVE: CVE-2016-1415
Published: 2016-09-03
Description: Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-webex; http://www.securityfocus.com/bid/92711; http://www.securitytracker.com/id/1036713
CVE: CVE-2016-1464
Published: 2016-09-03
Description: Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-meetings-player; http://www.securityfocus.com/bid/92708; http://www.securitytracker.com/id/1036712
CVE: CVE-2016-5429
Published: 2016-09-03
Description: jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php and JWS.php.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92743; https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b#diff-2a982d82ef0f673fd0ba2beba0e18420R138; https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a[PII_REDACTED]ccdd6R287
CVE: CVE-2016-5430
Published: 2016-09-03
Description: The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-310
References: http://www.securityfocus.com/bid/92741; https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a[PII_REDACTED]ccdd6R199; http://www.securityfocus.com/bid/92741
CVE: CVE-2016-6377
Published: 2016-09-03
Description: Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp; http://www.securityfocus.com/bid/92715; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp
CVE: CVE-2016-7112
Published: 2016-09-06
Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/92747; http://www.securityfocus.com/bid/99471; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf
CVE: CVE-2016-7113
Published: 2016-09-06
Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 80/tcp could cause the affected device to go into defect mode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/92748; http://www.securityfocus.com/bid/99471; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf
CVE: CVE-2016-7114
Published: 2016-09-06
Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC 7SD686 : All versions < V 4.05; SIPROTEC 7SJ66 : All versions < V 4.30. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/92745; http://www.securityfocus.com/bid/99471; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf
CVE: CVE-2016-7152
Published: 2016-09-06
Description: The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/; http://www.securityfocus.com/bid/92769; http://www.securitytracker.com/id/1036741
CVE: CVE-2016-7153
Published: 2016-09-06
Description: The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/; http://www.securityfocus.com/bid/92773; http://www.securitytracker.com/id/1036741