deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability in Tickets component that can result in an authenticated user can read all tickets available on the platform, due to lack of access controls. This attack appears to be exploitable via ticket_id=[ticket number]. This vulnerability appears to have been fixed in 1.11.x after commit 33e2692a37b5b6340cf5bec1a84e541460983c03.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/chamilo/chamilo-lms/commit/33e2692a37b5b6340cf5bec1a84e541460983c03; https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-34-2019-01-14-Moderate-risk-moderate-impact-XSS-and-unauthorized-access; https://github.com/chamilo/chamilo-lms/commit/33e2692a37b5b6340cf5bec1a84e541460983c03
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp permission.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: http://seclists.org/fulldisclosure/2021/May/78; https://esnet-security.github.io/vulnerabilities/20190115_rssh; https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2021-33216%2CCVE-2[PII_REDACTED]/CommScope%20Ruckus%20IoT%20Controller%201.7.1.0%20Undocumented%20Account.txt
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub) options profile, used for the configuration of default access model that can result in all of the contacts of the victim can see private data having been published to a PEP node. This attack appears to be exploitable if the user of this library publishes any private data on PEP, the node isn't configured to be private. This vulnerability appears to have been fixed in commit 7cd73b594e8122dddf847953fcfc85ab4d316416 which is included in slixmpp 1.4.2.
CVSS Score: 7.5 (HIGH)
References: https://lab.louiz.org/poezio/slixmpp/commit/7cd73b594e8122dddf847953fcfc85ab4d316416; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GKBXN7EAAR7ENEZUBKV6C6MP6QBXYTWT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WIBP4LD2V4TBJSLZXDUAGQMD6CUI2TZR/
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF) vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoint. This vulnerability appears to have been fixed in 1.14.0 and later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/ptaoussanis/sente/issues/137; https://github.com/ptaoussanis/sente/issues/137
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: OPT/NET BV OPTOSS Next Gen Network Management System (NG-NetMS) version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, id_access_type and id_attr_access that can result in a malicious attacker can include own SQL commands which database will execute. This attack appears to be exploitable via network connectivity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://inf0seq.github.io/cve/2019/01/20/SQL-Injection-in-OPTOSS-Next-Gen-Network-Management-System-%28NG-NetMS%29.html; https://sourceforge.net/projects/ngnms/; https://www.owasp.org/index.php/SQL_Injection
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting (XSS) vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result in Cross-site scripting.This attack appear to be exploitable via network connectivity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://inf0seq.github.io/cve/2019/01/20/Cross-site-scripting-%28XSS%29-in-OPTOSS-Next-Gen-Network-Management-System-%28NG-NetMS%29.html; https://sourceforge.net/projects/ngnms/; https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29
CVE: CVE-2019-4038
Published: 2019-02-04
Description: IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/156162; https://www.ibm.com/support/docview.wss?uid=ibm10869604; https://exchange.xforce.ibmcloud.com/vulnerabilities/156162
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED].  Reason: This candidate is a duplicate of CVE-2[PII_REDACTED].  Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-15778
Published: 2019-02-04
Description: Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.dell.com/support/article/sln316095/; https://www.dell.com/support/article/sln316095/
CVE: CVE-2019-7387
Published: 2019-02-04
Description: A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from system/maintenance/export.php, it accepts the path provided by the user, leading to path traversal via the name parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://s3curityb3ast.github.io/KSA-Dev-004.md; https://www.breakthesec.com/2019/02/cve-2019-7387-authenticated-arbitrary.html; https://s3curityb3ast.github.io/KSA-Dev-004.md
CVE: CVE-2019-7388
Published: 2019-02-05
Description: An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an attacker can achieve information disclosure without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106852; https://github.com/leonW7/D-Link/blob/master/Vul_3.md; http://www.securityfocus.com/bid/106852
CVE: CVE-2019-7389
Published: 2019-02-05
Description: An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of-service attack without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/106853; https://github.com/leonW7/D-Link/blob/master/Vul_4.md; http://www.securityfocus.com/bid/106853
CVE: CVE-2019-7390
Published: 2019-02-05
Description: An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/106855; https://github.com/leonW7/D-Link/blob/master/Vul_5.md; http://www.securityfocus.com/bid/106855
CVE: CVE-2019-7395
Published: 2019-02-05
Description: In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; http://www.securityfocus.com/bid/106850
CVE: CVE-2019-7396
Published: 2019-02-05
Description: In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://www.securityfocus.com/bid/106849; https://github.com/ImageMagick/ImageMagick/commit/748a03651e5b138bcaf160d15133de2f4b1b89ce
CVE: CVE-2019-7397
Published: 2019-02-05
Description: In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/11ad3aeb8ab1; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html
CVE: CVE-2019-7398
Published: 2019-02-05
Description: In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; http://www.securityfocus.com/bid/106848
CVE: CVE-2018-15655
Published: 2019-02-05
Description: An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings. Cross-origin access is possible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/; https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
CVE: CVE-2018-15656
Published: 2019-02-05
Description: An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specified e-mail address. The request must be made with an "apiKey" value in the "ApiKey" header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/; https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
CVE: CVE-2018-15657
Published: 2019-02-05
Description: An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/; https://www.exploit-db.com/exploits/46305/; https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
CVE: CVE-2018-15658
Published: 2019-02-05
Description: An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePage/Master.html, an attacker is able to see the markup that would be presented to an authenticated user. This is caused by the session validation occurring after the initial markup is loaded. This results in a list of unprotected API endpoints that disclose call logs, SMS logs, and user-account data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/; https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
CVE: CVE-2018-15659
Published: 2019-02-05
Description: An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications. Cross-origin access is possible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/; https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
CVE: CVE-2017-18362
Published: 2019-02-05
Description: ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://archive.today/rdkeQ; https://github.com/kbni/owlky; https://webcache.googleusercontent.com/search?q=cache:ZEo8ZRF_iEIJ:https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]72-Connectwise-API-Vulnerability+
CVE: CVE-2018-20753
Published: 2019-02-05
Description: Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88; https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]52; https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
CVE: CVE-2019-7400
Published: 2019-02-05
Description: Rukovoditel before 2.4.1 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html; https://blog.rukovoditel.net/rukovoditel-2-4-1/; https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/
CVE: CVE-2019-7402
Published: 2019-02-05
Description: An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfg&#95;qqcode parameter. This can be exploited via CSRF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://github.com/panghusec/exploit/issues/8; https://github.com/panghusec/exploit/issues/8
CVE: CVE-2019-7403
Published: 2019-02-05
Description: An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=../ URI.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/panghusec/exploit/issues/9; https://github.com/panghusec/exploit/issues/9
CVE: CVE-2[PII_REDACTED]
Published: 2019-02-05
Description: Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2[PII_REDACTED].py; https://github.com/outflanknl/Exploits/blob/master/harakiri-CVE-2[PII_REDACTED].py
CVE: CVE-2018-11803
Published: 2019-02-05
Description: Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: http://www.securityfocus.com/bid/106770; https://lists.apache.org/thread.html/fa[PII_REDACTED]3c142d264534385f8ea5d8d6b80d27f36f3c46f55003%40%3Cdev.subversion.apache.org%3E; https://security.gentoo.org/glsa/201904-08
CVE: CVE-2019-3818
Published: 2019-02-05
Description: The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: http://www.securityfocus.com/bid/106744; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/security/cve/CVE-2019-3818
CVE: CVE-2017-1177
Published: 2019-02-05
Description: IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/123429; https://www-01.ibm.com/support/docview.wss?uid=ibm10737581; https://exchange.xforce.ibmcloud.com/vulnerabilities/123429
CVE: CVE-2017-1198
Published: 2019-02-05
Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.
CVSS Score: 3.7 (LOW)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/123673; https://www-01.ibm.com/support/docview.wss?uid=ibm10737581; https://exchange.xforce.ibmcloud.com/vulnerabilities/123673
CVE: CVE-2017-1200
Published: 2019-02-05
Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/123675; https://www-01.ibm.com/support/docview.wss?uid=ibm10737581; https://exchange.xforce.ibmcloud.com/vulnerabilities/123675
CVE: CVE-2017-1202
Published: 2019-02-05
Description: IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/123677; https://www-01.ibm.com/support/docview.wss?uid=ibm10737581; https://exchange.xforce.ibmcloud.com/vulnerabilities/123677
CVE: CVE-2018-18986
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read, which may cause a system crash, allow data exfiltration, or remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-125
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-18990
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-23, CWE-22
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-18992
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-74
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-18996
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-862
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-18998
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-19000
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-288, CWE-287
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-19002
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-19029
Published: 2019-02-05
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822, CWE-476
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634