rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-25194 MOXA NPort IAW5000A-I/O Series
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: MOXA
product: NPort IAW5000A-I/O
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Evgeniy Druzhinin and Ilya Karpov of Rostelecom-Solar reported these vulnerabilities to CISA
Published: 2020-12-23T14:08:17.398Z
CVE-2020-25195 
The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: Host Engineering H0-ECOM100 Module
vendor: n/a
product: Host Engineering H2-ECOM100 Module
vendor: n/a
product: Host Engineering H4-ECOM100 Module
Published: 2020-12-15T19:38:02.000Z
CVE-2020-25196 MOXA NPort IAW5000A-I/O Series
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.
Problem types: cwe_id: CWE-307
description: CWE-307: Improper Restriction of Excessive Authentication Attempts
Affected products: vendor: MOXA
product: NPort IAW5000A-I/O
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Evgeniy Druzhinin and Ilya Karpov of Rostelecom-Solar reported these vulnerabilities to CISA
Published: 2020-12-23T14:08:41.583Z
CVE-2020-25197 GE Reason RT43X Clocks Code Injection
A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: GE
product: Reason RT43X Clocks
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Tom Westenberg of Thales UK reported these vulnerabilities to GE.
Published: 2022-03-18T18:00:34.000Z
CVE-2020-25198 MOXA NPort IAW5000A-I/O Series
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies.
Problem types: cwe_id: CWE-384
description: CWE-384 Session Fixation
Affected products: vendor: MOXA
product: NPort IAW5000A-I/O
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Evgeniy Druzhinin and Ilya Karpov of Rostelecom-Solar reported these vulnerabilities to CISA
Published: 2020-12-23T14:08:23.404Z
CVE-2020-25199 
A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when processing project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-122
description: HEAP-BASED BUFFER OVERFLOW CWE-122
Affected products: vendor: n/a
product: WECON Technology Co., Ltd LeviStudioU
Published: 2020-12-09T16:12:36.000Z
CVE-2020-25200 
Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, then after 20 login attempts, the server will start responding with error 400. Invalid usernames will receive error 401 indefinitely. Note: This has been disputed by the vendor as not a vulnerability. They argue that this is an intended design
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T17:36:58.000Z
CVE-2020-25201 
HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-04T22:32:10.000Z
CVE-2020-25203 
The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T03:55:20.000Z
CVE-2020-25204 
The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver. The purpose of this broadcast receiver is to show an in-game push notification to the player. However, the application does not enforce any authorization schema on the broadcast receiver, allowing any application to send fully customizable in-game push notifications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-28T18:47:17.000Z
CVE-2020-25205 
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php. An unauthenticated attacker may set the contents of the /mnt/jffs2/banner.txt file, stored on the device's filesystem, to contain arbitrary JavaScript. The file contents are then used as part of a welcome/banner message presented to unauthenticated users who visit the login page for the web console. This vulnerability does not occur in the older 1.5.x firmware versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T18:45:21.000Z
CVE-2020-25206 
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T18:45:29.000Z
CVE-2020-25207 
JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T15:01:02.000Z
CVE-2020-25208 
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T15:27:12.000Z
CVE-2020-25209 
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T14:56:56.000Z
CVE-2020-25210 
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T14:45:46.000Z
CVE-2020-25211 
In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T15:51:41.000Z
CVE-2020-25212 
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T15:52:01.000Z
CVE-2020-25213 
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
Published: 2020-09-09T00:00:00.000Z
CVE-2020-25214 
In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-16T19:38:04.000Z
CVE-2020-25215 
yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T00:00:00.000Z
CVE-2020-25216 
yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T00:00:00.000Z
CVE-2020-25217 
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-29T16:59:06.000Z
CVE-2020-25218 
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-29T16:54:31.000Z
CVE-2020-25219 
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T20:30:41.000Z
CVE-2020-25220 
The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-10T01:20:12.000Z
CVE-2020-25221 
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit process that can use ptrace() or process_vm_readv(), aka CID-9fa2dd946743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-10T13:39:59.000Z
CVE-2020-25223 
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T00:00:00.000Z
CVE-2020-25226 
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Siemens
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Published: 2021-01-12T20:18:33.000Z
CVE-2020-25228 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:18.000Z
CVE-2020-25229 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:18.000Z
CVE-2020-25230 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device.
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:18.000Z
CVE-2020-25231 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
vendor: Siemens
product: LOGO! Soft Comfort
Published: 2020-12-14T21:05:18.000Z
CVE-2020-25232 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:19.000Z
CVE-2020-25233 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:19.000Z
CVE-2020-25234 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
vendor: Siemens
product: LOGO! Soft Comfort
Published: 2020-12-14T21:05:19.000Z
CVE-2020-25235 
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins.
Problem types: cwe_id: CWE-522
description: CWE-522: Insufficiently Protected Credentials
Affected products: vendor: Siemens
product: LOGO! 8 BM (incl. SIPLUS variants)
Published: 2020-12-14T21:05:19.000Z
CVE-2020-25236 
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). The control logic (CL) the LOGO! 8 executes could be manipulated in a way that could cause the device
executing the CL to improperly handle the manipulation and crash. After successful execution of the attack, the device needs to be manually reset.
Problem types: cwe_id: CWE-755
description: CWE-755: Improper Handling of Exceptional Conditions
Affected products: vendor: Siemens
product: LOGO! 12/24RCE
default_status: unknown
vendor: Siemens
product: LOGO! 12/24RCEo
default_status: unknown
vendor: Siemens
product: LOGO! 230RCE
default_status: unknown
vendor: Siemens
product: LOGO! 230RCEo
default_status: unknown
vendor: Siemens
product: LOGO! 24CE
default_status: unknown
vendor: Siemens
product: LOGO! 24CEo
default_status: unknown
vendor: Siemens
product: LOGO! 24RCE
default_status: unknown
vendor: Siemens
product: LOGO! 24RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 12/24RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 12/24RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 230RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 230RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24CE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24CEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24RCEo
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:T/RC:C
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2021-03-15T17:03:30.000Z
CVE-2020-25237 
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054)
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: SINEC NMS
vendor: Siemens
product: SINEMA Server
Published: 2021-02-09T15:38:17.000Z
CVE-2020-25238 
A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Siemens
product: PCS neo (Administration Console)
vendor: Siemens
product: TIA Portal
Published: 2021-02-09T15:38:18.000Z
CVE-2020-25239 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: SINEMA Remote Connect Server
Published: 2021-03-15T17:03:30.000Z
CVE-2020-25240 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: SINEMA Remote Connect Server
Published: 2021-03-15T17:03:30.000Z
CVE-2020-25241 
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.
Problem types: cwe_id: CWE-1285
description: CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input
Affected products: vendor: Siemens
product: SIMATIC MV400 family
Published: 2021-03-15T17:03:30.000Z