rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10935 
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions < V14 SP1 Upd 9), SIMATIC WinCC Professional (TIA Portal V15) (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Siemens AG
product: SIMATIC PCS 7 V8.0 and earlier
vendor: Siemens AG
product: SIMATIC PCS 7 V8.1
vendor: Siemens AG
product: SIMATIC PCS 7 V8.2
vendor: Siemens AG
product: SIMATIC PCS 7 V9.0
vendor: Siemens AG
product: SIMATIC WinCC Professional (TIA Portal V13)
vendor: Siemens AG
product: SIMATIC WinCC Professional (TIA Portal V14)
vendor: Siemens AG
product: SIMATIC WinCC Professional (TIA Portal V15)
vendor: Siemens AG
product: SIMATIC WinCC Runtime Professional V13
vendor: Siemens AG
product: SIMATIC WinCC Runtime Professional V14
vendor: Siemens AG
product: SIMATIC WinCC Runtime Professional V15
vendor: Siemens AG
product: SIMATIC WinCC V7.2 and earlier
vendor: Siemens AG
product: SIMATIC WinCC V7.3
vendor: Siemens AG
product: SIMATIC WinCC V7.4
vendor: Siemens AG
product: SIMATIC WinCC V7.5
Published: 2019-07-11T21:17:47.000Z
CVE-2019-10937 
A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens AG
product: SIMATIC TDC CP51M1
Published: 2019-09-13T16:38:32.000Z
CVE-2019-10938 
A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 devices with CPU variants CP300 and CP100 (All versions < V8.01), Siemens Power Meters Series 9410 (All versions < V2.2.1), Siemens Power Meters Series 9810 (All versions). An unauthenticated attacker with network access to the device could potentially insert arbitrary code which is executed before firmware verification in the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Siemens AG
product: SIPROTEC 5 devices with CPU variants CP200
vendor: Siemens AG
product: SIPROTEC 5 devices with CPU variants CP300 and CP100
vendor: Siemens AG
product: Siemens Power Meters Series 9410
vendor: Siemens AG
product: Siemens Power Meters Series 9810
Published: 2019-08-02T13:54:07.000Z
CVE-2019-10939 
A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3). The affected versions contain an open debug port that is available under certain specific conditions. The vulnerability is only available if the IP address is configured to 192.168.1.2. If available, the debug port could be exploited by an attacker with network access to the device. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.
Problem types: cwe_id: CWE-489
description: CWE-489: Active Debug Code
Affected products: vendor: Siemens AG
product: TIM 3V-IE (incl. SIPLUS NET variants)
vendor: Siemens AG
product: TIM 3V-IE Advanced (incl. SIPLUS NET variants)
vendor: Siemens AG
product: TIM 3V-IE DNP3 (incl. SIPLUS NET variants)
vendor: Siemens AG
product: TIM 4R-IE (incl. SIPLUS NET variants)
vendor: Siemens AG
product: TIM 4R-IE DNP3 (incl. SIPLUS NET variants)
Published: 2020-04-14T19:50:54.000Z
CVE-2019-10940 
A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability could be exploited by an attacker with network access to the affected system. An attacker must have access to a low privileged account in order to exploit the vulnerability. An attacker could use the vulnerability to compromise confidentiality, integrity, and availability of the affected system and underlying components. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-266
description: CWE-266: Incorrect Privilege Assignment
Affected products: vendor: Siemens AG
product: SINEMA Server
Published: 2020-01-16T15:35:24.000Z
CVE-2019-10941 
A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected system, and successful exploitation requires no system privileges.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Siemens
product: SINEMA Server
Published: 2021-09-14T10:47:02.000Z
CVE-2019-10942 
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X204RNA (HSR) (All versions), SCALANCE X204RNA (PRP) (All versions), SCALANCE X204RNA EEC (HSR) (All versions), SCALANCE X204RNA EEC (PRP) (All versions), SCALANCE X204RNA EEC (PRP/HSR) (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: Siemens
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X204RNA (HSR)
vendor: Siemens
product: SCALANCE X204RNA (PRP)
vendor: Siemens
product: SCALANCE X204RNA EEC (HSR)
vendor: Siemens
product: SCALANCE X204RNA EEC (PRP)
vendor: Siemens
product: SCALANCE X204RNA EEC (PRP/HSR)
Published: 2019-08-13T18:55:57.000Z
CVE-2019-10943 
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V20.8), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-1500 Software Controller (All versions >= V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC S7-PLCSIM Advanced (All versions >= V3.0). An attacker with network access to port 102/tcp could potentially modify the user program on the PLC in a way that the running code is different from the source code which is stored on the device. An attacker must have network access to affected devices and must be able to perform changes to the user program. The vulnerability could impact the perceived integrity of the user program stored on the CPU. An engineer that tries to obtain the code of the user program running on the device, can receive different source code that is not actually running on the device.
Problem types: cwe_id: CWE-353
description: CWE-353: Missing Support for Integrity Check
Affected products: vendor: Siemens
product: SIMATIC Drive Controller family
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens
product: SIMATIC S7-1500 Software Controller
vendor: Siemens
product: SIMATIC S7-1500 Software Controller
vendor: Siemens
product: SIMATIC S7-PLCSIM Advanced
vendor: Siemens
product: SIMATIC S7-PLCSIM Advanced
Published: 2019-08-13T18:55:57.000Z
CVE-2019-10945 
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-10T18:07:28.000Z
CVE-2019-10946 
An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of com_users lacks access checks, allowing calls from unauthenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-10T18:08:53.000Z
CVE-2019-10947 
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks user input validation before copying data from project files onto the stack.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: n/a
product: Delta Industrial Automation CNCSoft
Published: 2019-04-17T14:04:53.000Z
CVE-2019-10948 
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.
Problem types: cwe_id: CWE-400
description: UNCONTROLLED RESOURCE CONSUMPTION CWE-400
Affected products: vendor: Fujifilm
product: Fujifilm FCR Capsula X/ Carbon X
Published: 2019-04-30T16:41:37.000Z
CVE-2019-10949 
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files.
Problem types: cwe_id: CWE-125
description: OUT-OF-BOUNDS READ CWE-125
Affected products: vendor: n/a
product: Delta Industrial Automation CNCSoft
Published: 2019-04-17T14:03:17.000Z
CVE-2019-10950 
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: Fujifilm
product: Fujifilm FCR Capsula X/ Carbon X
Published: 2019-04-30T16:44:35.000Z
CVE-2019-10951 
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.
Problem types: cwe_id: CWE-122
description: HEAP-BASED BUFFER OVERFLOW CWE-122
Affected products: vendor: n/a
product: Delta Industrial Automation CNCSoft
Published: 2019-04-17T14:04:03.000Z
CVE-2019-10952 Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering 

CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: Rockwell Automation
product: CompactLogix 5370 L1 controllers
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix 5370 L2 controllers
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix 5370 L3 controllers
default_status: unaffected
vendor: Rockwell Automation
product: Compact GuardLogix 5370 controllers
default_status: unaffected
vendor: Rockwell Automation
product: Armor Compact GuardLogix 5370 controllers
default_status: unaffected
Credits: lang: en
value: Younes Dragoni of Nozomi Networks of CyberX reported to CISA.
Published: 2019-05-01T19:02:42.000Z
CVE-2019-10953 
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
Problem types: cwe_id: CWE-400
description: UNCONTROLLED RESOURCE CONSUMPTION CWE-400
Affected products: vendor: ABB
product: 1SAP120600R0071 PM554-TP-ETH
default_status: unaffected
vendor: Phoenix Contact
product: 2700974 ILC 151 ETH
default_status: unaffected
vendor: Phoenix Contact
product: ILC 191 ETH 2TX
default_status: unaffected
vendor: Schneider Electric
product: Modicon M221
default_status: unaffected
vendor: Schneider Electric
product: EcoStruxure Machine Expert – Basic
default_status: unaffected
vendor: Siemens
product: 6ES7211-1AE40-0XB0 Simatic S7-1211
default_status: unaffected
vendor: Siemens
product: 6ES7314-6EH04-0AB0 Simatic S7-314
default_status: unaffected
vendor: Siemens
product: 6ED1052-1CC01-0BA8 Logo! 8
default_status: unaffected
vendor: WAGO
product: 750-889 Controller KNX IP
default_status: unaffected
vendor: WAGO
product: 750-8100 Controller PFC100
default_status: unaffected
vendor: WAGO
product: 750-880 Controller ETH
default_status: unaffected
vendor: WAGO
product: 750-831 Controller BACnet/IP
default_status: unaffected
Credits: lang: en
value: Matthias Niedermaier (Hochschule Augsburg), Jan-Ole Malchow (Freie Universität Berlin), and Florian Fischer (Hochschule Augsburg) reported this vulnerability to CISA.
lang: en
value: Mikael Vingaard found and reported to CISA additional devices containing this vulnerability.
Published: 2019-04-17T14:02:15.000Z
CVE-2019-10954 Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Rockwell Automation
product: CompactLogix 5370 L1 controllers
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix 5370 L2 controllers
default_status: unaffected
vendor: Rockwell Automation
product: CompactLogix 5370 L3 controllers
default_status: unaffected
vendor: Rockwell Automation
product: Compact GuardLogix 5370 controllers
default_status: unaffected
vendor: Rockwell Automation
product: Armor Compact GuardLogix 5370 controllers
default_status: unaffected
Credits: lang: en
value: George Lashenko of CyberX reported to CISA.
Published: 2019-05-01T18:59:28.000Z
CVE-2019-10955 
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier, an open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.
Problem types: cwe_id: CWE-601
description: URL REDIRECTION TO UNTRUSTED SITE ('OPEN REDIRECT') CWE-601
Affected products: vendor: Rockwell Automation
product: MicroLogix 1400 Controllers
vendor: Rockwell Automation
product: MicroLogix 1100 Controllers
vendor: Rockwell Automation
product: CompactLogix 5370 L1 controllers
vendor: Rockwell Automation
product: CompactLogix 5370 L2 controllers
vendor: Rockwell Automation
product: CompactLogix 5370 L3 controllers
Published: 2019-04-25T17:27:32.000Z
CVE-2019-10956 
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.
Problem types: cwe_id: CWE-78
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78
Affected products: vendor: n/a
product: Geutebruck IP Cameras
Published: 2020-01-17T17:52:38.000Z
CVE-2019-10957 
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
Affected products: vendor: n/a
product: Geutebruck IP Cameras
Published: 2020-01-17T17:53:09.000Z
CVE-2019-10958 
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root.
Problem types: cwe_id: CWE-78
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78
Affected products: vendor: n/a
product: Geutebruck IP Cameras
Published: 2020-01-17T17:53:34.000Z
CVE-2019-10959 
BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmware Versions 1.3.2 and 1.6.1, Additionally, the following products using software Version 2.3.6 and below, Alaris GS, Alaris GH, Alaris CC, Alaris TIVA, The application does not restrict the upload of malicious files during a firmware update.
Problem types: cwe_id: CWE-434
description: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434
Affected products: vendor: n/a
product: BD Alaris Gateway Workstation
Published: 2019-06-13T20:03:44.000Z
CVE-2019-10960 
Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.
Problem types: cwe_id: CWE-522
description: INSUFFICENTLY PROTECTED CREDENTIALS CWE-522
Affected products: vendor: n/a
product: Zebra Industrial Printers All Versions
Published: 2019-08-20T20:53:23.000Z
CVE-2019-10961 
In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.
Problem types: cwe_id: CWE-787
description: OUT-OF-BOUNDS WRITE CWE-787
Affected products: vendor: n/a
product: Advantech WebAccess HMI Designer
Published: 2019-08-02T16:06:09.000Z
CVE-2019-10962 
BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: n/a
product: BD Alaris Gateway Workstation
Published: 2019-06-13T20:03:37.000Z
CVE-2019-10963 
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
Problem types: cwe_id: CWE-321
description: USE OF HARD-CODED CRYPTOGRAPHIC KEY CWE-321
Affected products: vendor: n/a
product: Moxa EDR 810
Published: 2019-10-08T18:41:43.000Z