deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-5655
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-284
References: https://gitlab.com/gitlab-org/gitlab/-/issues/465862; https://hackerone.com/reports/2536320; https://gitlab.com/gitlab-org/gitlab/-/issues/465862
CVE: CVE-2024-6323
Published: 2024-06-27
Description: Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/457912; https://gitlab.com/gitlab-org/gitlab/-/issues/457912
CVE: CVE-2024-5289
Published: 2024-06-27
Description: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget parameters in all versions up to, and including, 3.2.42 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.2.38/includes/blocks/class-kadence-blocks-googlemaps-block.php#L226; https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.2.42/includes/blocks/class-kadence-blocks-googlemaps-block.php#L237; https://www.wordfence.com/threat-intel/vulnerabilities/id/f9c0ad1e-380e-4b67-b07e-70bf44e4e614?source=cve
CVE: CVE-2024-6054
Published: 2024-06-27
Description: The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'create_post_attachment_from_url' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/auto-featured-image/tags/1.2/auto-featured-image.php#L167; https://www.wordfence.com/threat-intel/vulnerabilities/id/4d1512c2-75c1-405b-8bb4-f42ec69159a7?source=cve; https://plugins.trac.wordpress.org/browser/auto-featured-image/tags/1.2/auto-featured-image.php#L167
CVE: CVE-2024-4569
Published: 2024-06-27
Description: The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 1.13.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/addon-elements-for-elementor-page-builder/trunk/modules/modal-popup/widgets/modal-popup.php#L1060; https://plugins.trac.wordpress.org/changeset/3107074/; https://www.wordfence.com/threat-intel/vulnerabilities/id/63ef7383-d684-473b-aa0f-45027ef245f6?source=cve
CVE: CVE-2024-4570
Published: 2024-06-27
Description: The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 1.13.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/addon-elements-for-elementor-page-builder/tags/1.13.4/classes/helper.php#L232; https://plugins.trac.wordpress.org/changeset/3107074/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ab5f43c0-83d3-4d09-becd-a3552bebd609?source=cve
CVE: CVE-2024-6283
Published: 2024-06-27
Description: The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget in all versions up to and including 2.1.5 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php#L2565; https://plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php#L2900; https://www.wordfence.com/threat-intel/vulnerabilities/id/9b2083f9-79d0-43f6-b7ae-a5817dc561b0?source=cve
CVE: CVE-2024-1330
Published: 2024-06-27
Description: The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/1988815b-7a53-4657-9b1c-1f83c9f9ccfd/; https://wpscan.com/vulnerability/1988815b-7a53-4657-9b1c-1f83c9f9ccfd/
CVE: CVE-2024-3111
Published: 2024-06-27
Description: The Interactive Content  WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7c39f3b5-d407-4eb0-aa34-b498fe196c55/; https://wpscan.com/vulnerability/7c39f3b5-d407-4eb0-aa34-b498fe196c55/
CVE: CVE-2024-4664
Published: 2024-06-27
Description: The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admins to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/46ada0b4-f3cd-44fb-a568-3345e639bdb6/; https://wpscan.com/vulnerability/46ada0b4-f3cd-44fb-a568-3345e639bdb6/
CVE: CVE-2024-4704
Published: 2024-06-27
Description: The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/8bdcdb5a-9026-4157-8592-345df8fb1a17/; https://wpscan.com/vulnerability/8bdcdb5a-9026-4157-8592-345df8fb1a17/
CVE: CVE-2024-22231
Published: 2024-06-27
Description: Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://saltproject.io/security-announcements/2024-01-31-advisory/; https://saltproject.io/security-announcements/2024-01-31-advisory/
CVE: CVE-2024-22232
Published: 2024-06-27
Description: A specially crafted url can be created which leads to a directory traversal in the salt file server.
A malicious user can read an arbitrary file from a Salt master’s filesystem.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://saltproject.io/security-announcements/2024-01-31-advisory/; https://saltproject.io/security-announcements/2024-01-31-advisory/
CVE: CVE-2024-5601
Published: 2024-06-27
Description: The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/mediavine-create/trunk/class-plugin.php#L575; https://plugins.trac.wordpress.org/changeset/3108144/#file794; https://wordpress.org/plugins/mediavine-create/#developers
CVE: CVE-2024-4983
Published: 2024-06-27
Description: The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘video_color’ parameter in all versions up to, and including, 5.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/5.5.3/modules/widgets/tp_video_player.php#L1302; https://plugins.trac.wordpress.org/changeset/3107776/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e3f0a20b-d572-4040-b5b6-ede0aec4e2b0?source=cve
CVE: CVE-2023-7270
Published: 2024-06-27
Description: An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 2021 is also affected, but won't be fixed.





The SoftMaker Office and FreeOffice MSI installer files were found to
 produce a visible conhost.exe window running as the SYSTEM user when 
using the repair function of msiexec.exe. This allows a local, 
low-privileged attacker to use a chain of actions, to open a fully 
functional cmd.exe with the privileges of the SYSTEM user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266
References: http://seclists.org/fulldisclosure/2024/Jul/5; https://r.sec-consult.com/softmaker; https://softmaker.de/download/servicepacks
CVE: CVE-2024-0947
Published: 2024-06-27
Description: Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Tokens.This issue affects Elektraweb: before v17.0.68.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-565
References: https://www.usom.gov.tr/bildirim/tr-24-0808; https://www.usom.gov.tr/bildirim/tr-24-0808
CVE: CVE-2024-0949
Published: 2024-06-27
Description: Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.This issue affects Elektraweb: before v17.0.68.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-552, CWE-798
References: https://www.usom.gov.tr/bildirim/tr-24-0808; https://www.usom.gov.tr/bildirim/tr-24-0808
CVE: CVE-2024-6262
Published: 2024-06-27
Description: The Portfolio Gallery – Image Gallery Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'PFG' shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/portfolio-filter-gallery/trunk/lightbox/ld-lightbox/js/lightbox.js; https://plugins.trac.wordpress.org/changeset/3107963/; https://www.wordfence.com/threat-intel/vulnerabilities/id/adf6b34b-a362-4cfe-b062-8bbe11584581?source=cve
CVE: CVE-2024-6367
Published: 2024-06-27
Description: A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unknown code of the file /labvantage/rc?command=file&file=WEB-CORE/elements/files/filesembedded.jsp of the component POST Request Handler. The manipulation of the argument sdcid/keyid1/keyid2/keyid3 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269800. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-c9aa0641d[PII_REDACTED]bb8b98958626f?pvs=4; https://vuldb.com/?ctiid.269800; https://vuldb.com/?id.269800
CVE: CVE-2024-6368
Published: 2024-06-27
Description: A vulnerability was found in LabVantage LIMS 2017. It has been rated as problematic. This issue affects some unknown processing of the file /labvantage/rc?command=page of the component POST Request Handler. The manipulation of the argument param1 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269801 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-53b90219d193451aa81f28dea480d5f2?pvs=4; https://vuldb.com/?ctiid.269801; https://vuldb.com/?id.269801
CVE: CVE-2024-6369
Published: 2024-06-27
Description: A vulnerability classified as problematic has been found in LabVantage LIMS 2017. Affected is an unknown function of the file /labvantage/rc?command=page&sdcid=LV_ReagentLot of the component POST Request Handler. The manipulation of the argument mode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-269802 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/Reflected-XSS-in-Labvantage-LIMS-960bf61d35124c858e3360785cfe40b3?pvs=4; https://vuldb.com/?ctiid.269802; https://vuldb.com/?id.269802
CVE: CVE-2024-6370
Published: 2024-06-27
Description: A vulnerability classified as problematic was found in LabVantage LIMS 2017. Affected by this vulnerability is an unknown functionality of the file /labvantage/rc?command=file&file=WEB-OPAL/pagetypes/bulletins/sendbulletin.jsp of the component POST Request Handler. The manipulation of the argument bulletinbody leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269803.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gentle-khaan-c53.notion.site/HTML-Injection-in-Labvantage-LIMS-a229aae13fa14977a677921e7a442619?pvs=4; https://vuldb.com/?ctiid.269803; https://vuldb.com/?id.269803
CVE: CVE-2024-1107
Published: 2024-06-27
Description: Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-24-0809; https://www.usom.gov.tr/bildirim/tr-24-0809
CVE: CVE-2024-38515
Published: 2024-06-27
Description: Rejected reason: This CVE is a duplicate of CVE-2024-38374.
CVE: CVE-2024-6371
Published: 2024-06-27
Description: A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file controller.php. The manipulation of the argument rmtype_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269804.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/L1OudFd8cl09/CVE/blob/main/25_06_2024_b.md; https://vuldb.com/?ctiid.269804; https://vuldb.com/?id.269804
CVE: CVE-2024-6372
Published: 2024-06-27
Description: A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269805 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Galaxy-lrc/cve/issues/1; https://vuldb.com/?ctiid.269805; https://vuldb.com/?id.269805
CVE: CVE-2024-6373
Published: 2024-06-27
Description: A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269806 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://github.com/Abyssun/abyssun-/issues/1; https://vuldb.com/?ctiid.269806; https://vuldb.com/?id.269806
CVE: CVE-2024-1153
Published: 2024-06-27
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0809; https://www.usom.gov.tr/bildirim/tr-24-0809
CVE: CVE-2024-39153
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/50/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/50/csrf.md
CVE: CVE-2024-39154
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/54/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/54/csrf.md
CVE: CVE-2024-39155
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/56/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/56/csrf.md
CVE: CVE-2024-39156
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add.
CVSS Score: 3.8 (LOW)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/55/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/55/csrf.md
CVE: CVE-2024-39157
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1.
CVSS Score: 3.8 (LOW)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/57/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/57/csrf.md
CVE: CVE-2024-39158
Published: 2024-06-27
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Thirtypenny77/cms2/blob/main/58/csrf.md; https://github.com/Thirtypenny77/cms2/blob/main/58/csrf.md
CVE: CVE-2024-6374
Published: 2024-06-27
Description: A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269807.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://secretive-agate-23c.notion.site/School-Management-System-PHP-MySQL-stored-1-0-1-Stored-XSS-41c9f85f307441c5885fb0df3d3fcc08; https://secretive-agate-23c.notion.site/School-Management-System-PHP-MySQL-stored-1-0-1-XSS-50088f0ed9e94efda9c57772ce192980; https://vuldb.com/?ctiid.269807
CVE: CVE-2023-30430
Published: 2024-06-27
Description: IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs.  IBM X-Force ID:  252183.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/252183; https://www.ibm.com/support/pages/node/7158789; https://exchange.xforce.ibmcloud.com/vulnerabilities/252183
CVE: CVE-2024-28820
Published: 2024-06-27
Description: Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attackers with a valid LDAP username and who can control the challenge/response password field to pass a string with more than 14 colons into this field and cause a buffer overflow.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-125
References: https://github.com/threerings/openvpn-auth-ldap/pull/92; https://github.com/threerings/openvpn-auth-ldap/tags; https://github.com/threerings/openvpn-auth-ldap/pull/92
CVE: CVE-2024-31883
Published: 2024-06-27
Description: IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption.   IBM X-Force ID:  287615.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-703
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/287615; https://www.ibm.com/support/pages/node/7158789; https://exchange.xforce.ibmcloud.com/vulnerabilities/287615
CVE: CVE-2024-39373
Published: 2024-06-27
Description: TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01
CVE: CVE-2024-39374
Published: 2024-06-27
Description: TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01
CVE: CVE-2024-39375
Published: 2024-06-27
Description: TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-603
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01
CVE: CVE-2024-39376
Published: 2024-06-27
Description: TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01