rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-5432 TIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability
The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains multiple vulnerabilities wherein a malicious user could theoretically perform cross-site scripting (XSS) attacks by way of manipulating artifacts prior to uploading them. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.
Problem types: description: The impact of the vulnerability includes the theoretical possibility of a user performing operations using another user's access, including administrative functions being performed by a non-administrative user. The impact also theoretically includes access to all administrative information, including deployment variable settings ("global variables")
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Administrator - Enterprise Edition
vendor: TIBCO Software Inc.
product: TIBCO Administrator - Enterprise Edition for z/Linux
Credits: lang: en
value: TIBCO would like to extend its appreciation to Baker Hamilton at Bishop Fox for discovery of this vulnerability.
Published: 2018-06-13T13:00:00.000Z
CVE-2018-5433 XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator
The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.
Problem types: description: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the system account used to run the affected component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Administrator - Enterprise Edition
vendor: TIBCO Software Inc.
product: TIBCO Administrator - Enterprise Edition for z/Linux
Credits: lang: en
value: TIBCO would like to extend its appreciation to Baker Hamilton at Bishop Fox for discovery of this vulnerability.
Published: 2018-06-13T13:00:00.000Z
CVE-2018-5434 XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent
The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Runtime Agent: versions up to and including 5.10.0, and TIBCO Runtime Agent for z/Linux: versions up to and including 5.9.1.
Problem types: description: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the operating system account used to run the affected component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Runtime Agent
vendor: TIBCO Software Inc.
product: TIBCO Runtime Agent for z/Linux
Credits: lang: en
value: TIBCO would like to extend its appreciation to Baker Hamilton at Bishop Fox for discovery of this vulnerability.
Published: 2018-06-13T13:00:00.000Z
CVE-2018-5435 TIBCO Spotfire Product Family Remote Code Execution Vulnerability
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.
Problem types: description: The impact of this vulnerability includes the theoretical possibility that an unprivileged remote attacker could execute code with the privileges of the user account running the affected component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Spotfire Analyst
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Analytics Platform for AWS Marketplace
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Deployment Kit
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Desktop
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Desktop Language Packs
Published: 2018-06-27T16:00:00.000Z
CVE-2018-5436 TIBCO Spotfire Server information disclosure vulnerabilities
The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.
Problem types: description: The impact of this vulnerability includes the theoretical possibly that an authenticated user could gain access to user and data source credentials, and then use those credentials for additional access.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Spotfire Analytics Platform for AWS Marketplace
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Server
Published: 2018-06-27T16:00:00.000Z
CVE-2018-5437 TIBCO Spotfire Product Family Information Disclosure Vulnerability
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.
Problem types: description: The impact of this vulnerability includes the theoretical possibly that an authenticated user could gain access to additional confidential information, including credentials to access additional resources.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Spotfire Analyst
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Analytics Platform for AWS Marketplace
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Deployment Kit
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Desktop
vendor: TIBCO Software Inc.
product: TIBCO Spotfire Desktop Language Packs
Published: 2018-06-27T16:00:00.000Z
CVE-2018-5438 
Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record (EMR) system, where ISCV is in KIOSK mode for multiple users and using Windows authentication. This may allow an attacker to gain unauthorized access to patient health information and potentially modify this information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-20T17:00:00.000Z
CVE-2018-5439 
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: n/a
product: Nortek Linear eMerge E3 Series
Published: 2018-02-19T18:00:00.000Z
CVE-2018-5440 
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: 3S-Smart Software Solutions GmbH CODESYS Web Server
Published: 2018-02-15T10:00:00.000Z
CVE-2018-5441 
An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.
Problem types: cwe_id: CWE-354
description: CWE-354
Affected products: vendor: n/a
product: PHOENIX CONTACT mGuard
Published: 2018-01-30T20:00:00.000Z
CVE-2018-5442 
A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Fuji Electric V-Server VPR
Published: 2018-02-05T18:00:00.000Z
CVE-2018-5443 
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2018-01-25T03:00:00.000Z
CVE-2018-5445 
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2018-01-25T03:00:00.000Z
CVE-2018-5446 Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format
Medtronic 2090 CareLink Programmer 

uses a per-product username and password that is stored in a recoverable format.
Problem types: cwe_id: CWE-257
description: CWE-257
Affected products: vendor: Medtronic
product: 2090 CareLink Programmer
default_status: unaffected
vendor: Medtronic
product: 29901 Encore Programmer
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Billy Rios and Jonathan Butts of Whitescope LLC identified these vulnerabilities and reported them to CISA.
Published: 2018-05-04T18:00:00.000Z
CVE-2018-5447 
An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service within the software that may allow a remote attacker to arbitrarily read/access system resources and affect the availability of the system.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Nari PCS-9611
Published: 2018-01-25T22:00:00.000Z
CVE-2018-5448 Medtronic 2090 Carelink Programmer Relative Path Traversal
Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system.
Problem types: cwe_id: CWE-23
description: CWE-23
Affected products: vendor: Medtronic
product: 2090 CareLink Programmer
default_status: unaffected
vendor: Medtronic
product: 29901 Encore Programmer
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Billy Rios and Jonathan Butts of Whitescope LLC identified these vulnerabilities and reported them to CISA.
Published: 2018-05-04T18:00:00.000Z
CVE-2018-5449 
A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: Moxa OnCell G3100-HSPA Series
Published: 2018-03-05T17:00:00.000Z
CVE-2018-5451 
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or the ability to execute arbitrary code.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: Philips
product: Philips Alice 6 System
Published: 2018-03-28T17:00:00.000Z
CVE-2018-5452 
A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547 could force the PLC to change its state into halt mode.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Emerson ControlWave Micro Process Automation Controller
Published: 2018-03-07T18:00:00.000Z
CVE-2018-5453 
An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.
Problem types: cwe_id: CWE-130
description: CWE-130
Affected products: vendor: n/a
product: Moxa OnCell G3100-HSPA Series
Published: 2018-03-05T17:00:00.000Z
CVE-2018-5454 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime.
Problem types: cwe_id: CWE-489
description: LEFTOVER DEBUG CODE CWE-489
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5455 
A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
Problem types: cwe_id: CWE-565
description: CWE-565
Affected products: vendor: n/a
product: Moxa OnCell G3100-HSPA Series
Published: 2018-03-05T17:00:00.000Z
CVE-2018-5457 
A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: n/a
product: Vyaire Medical CareFusion Upgrade Utility Vulnerability
Published: 2018-02-06T20:00:00.000Z
CVE-2018-5458 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain unauthorized access to resources and information.
Problem types: cwe_id: CWE-310
description: CRYPTOGRAPHIC ISSUES CWE-310
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5459 
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: WAGO PFC200 Series
Published: 2018-02-13T21:00:00.000Z
CVE-2018-5461 
An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
Problem types: cwe_id: CWE-326
description: CWE-326
Affected products: vendor: n/a
product: Hirschmann Automation and Control GmbH Classic Platform Switches
Published: 2018-03-06T21:00:00.000Z
CVE-2018-5462 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
Problem types: cwe_id: CWE-310
description: CRYPTOGRAPHIC ISSUES CWE-310
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5463 
A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution.
Problem types: cwe_id: CWE-703
description: IMPROPER CHECK OR HANDLING OF EXCEPTIONAL CONDITIONS CWE-703
Affected products: vendor: ICS-CERT
product: LCDS - Le&#195;&#163;o Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA
Published: 2018-04-09T21:00:00.000Z
CVE-2018-5464 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
Problem types: cwe_id: CWE-310
description: CRYPTOGRAPHIC ISSUES CWE-310
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5465 
A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.
Problem types: cwe_id: CWE-384
description: CWE-384
Affected products: vendor: n/a
product: Hirschmann Automation and Control GmbH Classic Platform Switches
Published: 2018-03-06T21:00:00.000Z
CVE-2018-5466 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
Problem types: cwe_id: CWE-310
description: CRYPTOGRAPHIC ISSUES CWE-310
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5467 
An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.
Problem types: cwe_id: CWE-598
description: CWE-598
Affected products: vendor: n/a
product: Hirschmann Automation and Control GmbH Classic Platform Switches
Published: 2018-03-06T21:00:00.000Z
CVE-2018-5468 
Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code
Problem types: cwe_id: CWE-264
description: PERMISSIONS, PRIVILEGES, AND ACCESS CONTROLS CWE-264
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5469 
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication.
Problem types: cwe_id: CWE-307
description: CWE-307
Affected products: vendor: n/a
product: Hirschmann Automation and Control GmbH Classic Platform Switches
Published: 2018-03-06T21:00:00.000Z
CVE-2018-5470 
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.
Problem types: cwe_id: CWE-428
description: UNQUOTED SEARCH PATH OR ELEMENT CWE-428
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5471 
A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: n/a
product: Hirschmann Automation and Control GmbH Classic Platform Switches
Published: 2018-03-06T21:00:00.000Z
CVE-2018-5472 
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.
Problem types: cwe_id: CWE-264
description: PERMISSIONS, PRIVILEGES, AND ACCESS CONTROLS CWE-264
Affected products: vendor: Philips
product: Philips IntelliSpace Portal
Published: 2018-03-26T14:00:00.000Z
CVE-2018-5473 
An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. The SSH functions of the device are vulnerable to buffer overflow conditions that may allow a remote attacker to execute arbitrary code on the device.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: GE D60 Line Distance Relay
Published: 2018-02-19T18:00:00.000Z