rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19194 
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key (LTK) if an out-of-order link-layer encryption request is received during Secure Connections pairing. An attacker in radio range can have arbitrary read/write access to protected GATT service data, cause a device crash, or possibly control a device's function by establishing an encrypted session with the zero LTK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T14:25:08.000Z
CVE-2019-19195 
The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T20:35:42.000Z
CVE-2019-19196 
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an attacker in radio range to cause a buffer overflow and denial of service (crash) via crafted packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T14:23:54.000Z
CVE-2019-19197 
IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHOD_NEITHER results in a read primitive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T19:01:28.000Z
CVE-2019-19198 
The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:55:34.000Z
CVE-2019-19199 
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T08:09:35.000Z
CVE-2019-19200 
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T14:25:16.000Z
CVE-2019-19202 
In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2 to a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T19:54:18.000Z
CVE-2019-19203 
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T20:06:59.000Z
CVE-2019-19204 
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T20:06:47.000Z
CVE-2019-19206 
Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:18:39.000Z
CVE-2019-19207 
rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T21:06:57.000Z
CVE-2019-19208 
Codiad Web IDE through 2.8.4 allows PHP Code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:45:49.000Z
CVE-2019-19209 
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:47:12.000Z
CVE-2019-19210 
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:54:33.000Z
CVE-2019-19211 
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:57:26.000Z
CVE-2019-19212 
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T19:48:25.000Z
CVE-2019-19215 
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:33:08.000Z
CVE-2019-19216 
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:33:05.000Z
CVE-2019-19217 
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:33:02.000Z
CVE-2019-19218 
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:32:59.000Z
CVE-2019-19219 
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:32:56.000Z
CVE-2019-19220 
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T13:32:53.000Z
CVE-2019-19221 
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T00:00:00.000Z
CVE-2019-19222 
A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted Forms/wireless_autonetwork_1 POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:03:51.000Z
CVE-2019-19223 
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on the admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:04:51.000Z
CVE-2019-19224 
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download the configuration (binary file) settings by submitting a rom-0 GET request without being authenticated on the admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:05:56.000Z
CVE-2019-19225 
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DNS servers without being authenticated on the admin interface by submitting a crafted Forms/dns_1 POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:07:23.000Z
CVE-2019-19226 
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to enable or disable MAC address filtering by submitting a crafted Forms/WlanMacFilter_1 POST request without being authenticated on the admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:08:25.000Z
CVE-2019-19227 
In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T13:39:40.000Z
CVE-2019-19228 
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T18:52:09.000Z
CVE-2019-19229 
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-04T18:50:17.000Z
CVE-2019-19230 
An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: CA Technologies, A Broadcom Company
product: CA Release Automation
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2019-12-09T20:36:49.352Z
CVE-2019-19231 
An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.
Problem types: cwe_id: CWE-65
description: CWE-65
Affected products: vendor: CA Technologies, Broadcom Company
product: CA Client Automation
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2019-12-20T21:08:06.000Z
CVE-2019-19232 
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T20:37:09.000Z
CVE-2019-19234 
In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes that this CVE is not valid. Disabling local password authentication for a user is not the same as disabling all access to that user--the user may still be able to login via other means (ssh key, kerberos, etc). Both the Linux shadow(5) and passwd(1) manuals are clear on this. Indeed it is a valid use case to have local accounts that are _only_ accessible via sudo and that cannot be logged into with a password. Sudo 1.8.30 added an optional setting to check the _shell_ of the target user (not the encrypted password!) against the contents of /etc/shells but that is not the same thing as preventing access to users with an invalid password hash
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T20:35:02.000Z
CVE-2019-19235 
AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-18T13:06:59.000Z
CVE-2019-19240 
Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-22T18:46:04.000Z
CVE-2019-19241 
In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and net/socket.c. For example, an attacker can bypass intended restrictions on adding an IPv4 address to the loopback interface. This occurs because IORING_OP_SENDMSG operations, although requested in the context of an unprivileged user, are sometimes performed by a kernel worker thread without considering that context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T19:02:37.000Z
CVE-2019-19242 
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T15:30:11.000Z
CVE-2019-19244 
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T19:32:38.000Z
CVE-2019-19245 
NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when double quotes are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T13:54:09.000Z
CVE-2019-19246 
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T16:16:20.000Z
CVE-2019-19247 
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:51:03.000Z
CVE-2019-19248 
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-12T13:52:23.000Z
CVE-2019-19249 
Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T16:47:35.000Z
CVE-2019-19250 
OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T16:47:20.000Z
CVE-2019-19251 
The Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that include an API key without the use of SSL/TLS. Although there is an Enable SSL option, it is disabled by default, and cleartext requests are made as soon as the app starts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-10T14:26:52.000Z
CVE-2019-19252 
vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-25T17:26:49.000Z
CVE-2019-19254 
GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T15:51:57.000Z
CVE-2019-19255 
GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:18:51.000Z
CVE-2019-19256 
GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:22:07.000Z
CVE-2019-19257 
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:26:28.000Z
CVE-2019-19258 
GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:28:24.000Z
CVE-2019-19259 
GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:30:51.000Z
CVE-2019-19260 
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:32:54.000Z
CVE-2019-19261 
GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:34:10.000Z
CVE-2019-19262 
GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:36:00.000Z
CVE-2019-19263 
GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:37:13.000Z
CVE-2019-19264 
In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T13:59:35.000Z
CVE-2019-19265 
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in notes for contacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T00:09:20.000Z
CVE-2019-19266 
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in notes for objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-06T00:00:39.000Z
CVE-2019-19269 
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T03:34:24.000Z
CVE-2019-19270 
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T03:34:09.000Z
CVE-2019-19271 
An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T03:33:56.000Z
CVE-2019-19272 
An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T03:33:41.000Z
CVE-2019-19273 
On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-04T15:46:12.000Z
CVE-2019-19274 
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:08:25.000Z
CVE-2019-19275 
typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:08:17.000Z
CVE-2019-19276 
A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels
Published: 2021-05-12T13:18:21.000Z