rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-0683 
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0684 
Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-07T10:00:00.000Z
CVE-2014-0685 
Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted (1) IGMPv2 or (2) IGMPv3 packets, aka Bug ID CSCug61691.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-07T10:00:00.000Z
CVE-2014-0686 
Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-04T02:00:00.000Z
CVE-2014-0691 
Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings without a password, aka Bug ID CSCuc79643.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T14:00:00.000Z
CVE-2014-0694 
Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-14T10:00:00.000Z
CVE-2014-0701 
Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service (reboot) by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0703 
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0704 
The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bug ID CSCuh33240.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0705 
The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0706 
Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0707 
Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T11:00:00.000Z
CVE-2014-0708 
WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) a browser's history, aka Bug ID CSCul98272.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-20T20:00:00.000Z
CVE-2014-0709 
Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0710 
Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0718 
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via fragmented packets, aka Bug ID CSCui91266.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0719 
The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000, aka Bug ID CSCui67394.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0720 
Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0721 
The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0722 
The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application, aka Bug ID CSCum05347.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0723 
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0724 
The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0725 
Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain sensitive information via unspecified access to a "file storage location," aka Bug ID CSCum05337.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0726 
SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0727 
SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0728 
SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0729 
SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T02:00:00.000Z
CVE-2014-0730 
Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0731 
The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0732 
The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-20T02:00:00.000Z
CVE-2014-0733 
The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-20T11:00:00.000Z
CVE-2014-0734 
SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-20T02:00:00.000Z
CVE-2014-0735 
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-20T02:00:00.000Z
CVE-2014-0736 
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug ID CSCum46468.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-20T02:00:00.000Z
CVE-2014-0737 
The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0738 
The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66770.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0739 
Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request, aka Bug ID CSCuj66766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-22T21:00:00.000Z
CVE-2014-0740 
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to hijack the authentication of administrators for requests that make administrative changes, aka Bug ID CSCun00701.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0741 
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0742 
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0743 
The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0745 
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0746 
The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0747 
The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-0748 
apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-27T02:00:00.000Z
CVE-2014-0749 
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-16T14:00:00.000Z
CVE-2014-0750 GE Proficy HMI/SCADA Path Traversal
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: GE
product: Proficy HMI/SCADA - CIMPLICITY
default_status: unaffected
vendor: GE
product: Proficy Process Systems with CIMPLICITY
default_status: unaffected
Credits: lang: en
value: amisto0x07 and Z0mb1E of Zero Day Initiative (ZDI)
Published: 2014-01-25T22:00:00.000Z
CVE-2014-0751 GE Proficy HMI/SCADA Path Traversal
The CIMPLICITY Web-based access component, CimWebServer, does not check 
the location of shell files being loaded into the system. By modifying 
the source location, an attacker could send shell code to the 
CimWebServer which would deploy the nefarious files as part of any SCADA
 project. This could allow the attacker to execute arbitrary code.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: GE
product: Proficy HMI/SCADA - CIMPLICITY
default_status: unaffected
vendor: GE
product: Proficy Process Systems with CIMPLICITY
default_status: unaffected
Credits: lang: en
value: amisto0x07 and Z0mb1E of Zero Day Initiative (ZDI)
Published: 2014-01-25T22:00:00.000Z
CVE-2014-0752 Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.
Problem types: cwe_id: CWE-529
description: CWE-529
Affected products: vendor: Ecava
product: IntegraXor
default_status: unaffected
Credits: lang: en
value: Zero Day Initiative
Published: 2014-01-09T11:00:00.000Z
CVE-2014-0753 Ecava IntegraXor Stack-based Buffer Overflow
Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Ecava
product: IntegraXor
default_status: unaffected
Credits: lang: en
value: Luigi Auriemma
Published: 2014-01-21T01:00:00.000Z
CVE-2014-0754 Schneider Electric
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: Schneider Electric
product: Ethernet modules for M340, Quantum and Premium PLC ranges
default_status: unaffected
Credits: lang: en
value: Billy Rios
Published: 2014-10-03T18:00:00.000Z
CVE-2014-0755 Rockwell RSLogix 5000 Insufficiently Protected Credentials
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: Rockwell Automation
product: RSLogix 5000 software
default_status: unaffected
Credits: lang: en
value: Stephen Dunlap
Published: 2014-02-05T02:00:00.000Z
CVE-2014-0757 Smart Software Solutions (3S) CoDeSys Runtime Toolkit  NULL Pointer Dereference
Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Smart Software Solutions (3S)
product: CoDeSys Runtime Toolkit
default_status: unaffected
Credits: lang: en
value: Nicholas Miles
Published: 2014-01-31T02:00:00.000Z
CVE-2014-0758 ICONICS GENESIS32 Exposed Dangerous Method or Function
An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.
Problem types: cwe_id: CWE-749
description: CWE-749
Affected products: vendor: ICONICS
product: GENESIS32
default_status: unaffected
Published: 2014-02-24T02:00:00.000Z
CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element
Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: Schneider Electric
product: Floating License Manager
default_status: unaffected
Published: 2014-02-28T02:00:00.000Z
CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1
 Modular Controller with CoDeSys and SoftMotion provide an undocumented 
access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application 
crash) via unspecified vectors.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Festo
product: CECX-X-C1 Modular Master Controller with CoDeSys
default_status: unaffected
vendor: Festo
product: CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
default_status: unaffected
Credits: lang: en
value: K. Reid Wightman of IOActive, Inc. has identified vulnerabilities in Festo’s CECX-X-C1 and CECX-X-M1 controllers.
Published: 2014-04-25T01:00:00.000Z
CVE-2014-0761 CG Automation ePAQ-9410 Substation Gateway Improper Input Validation
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: CG Automation
product: ePAQ-9410 Substation Gateway
default_status: unaffected
Credits: lang: en
value: Adam Crain of Automatak
lang: en
value: Chris Sistrunk of Mandiant
Published: 2014-08-28T01:00:00.000Z