rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-6791 
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 3 of 3). When a project with visibility more permissive than the target group is imported, it will retain its prior visibility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T20:25:04.000Z
CVE-2019-6792 
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T19:37:13.000Z
CVE-2019-6793 
An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T19:39:25.000Z
CVE-2019-6794 
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 5 of 6). A project guest user can view the last commit status of the default branch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T19:41:20.000Z
CVE-2019-6795 
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social engineering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T19:43:18.000Z
CVE-2019-6796 
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation and output encoding that results in a persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T19:51:41.000Z
CVE-2019-6797 
An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T15:59:00.000Z
CVE-2019-6798 
An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-26T17:00:00.000Z
CVE-2019-6799 
An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-26T17:00:00.000Z
CVE-2019-6800 
In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T18:05:02.000Z
CVE-2019-6802 
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-25T04:00:00.000Z
CVE-2019-6803 
typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-25T05:00:00.000Z
CVE-2019-6804 
An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-25T05:00:00.000Z
CVE-2019-6805 
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-25T08:00:00.000Z
CVE-2019-6806 
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.
Problem types: description: Multiple Vulnerabilities
Affected products: vendor: n/a
product: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
Published: 2019-05-22T20:04:46.000Z
CVE-2019-6807 
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus.
Problem types: description: Multiple Vulnerabilities
Affected products: vendor: n/a
product: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
Published: 2019-05-22T20:05:13.000Z
CVE-2019-6808 
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.
Problem types: description: Multiple Vulnerabilities
Affected products: vendor: n/a
product: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
Published: 2019-05-22T20:05:50.000Z
CVE-2019-6809 
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller.
Problem types: cwe_id: CWE-248
description: CWE-248: Uncaught Exception
Affected products: vendor: Schneider Electric SE
product: Modicon M580
vendor: Schneider Electric SE
product: Modicon M340
vendor: Schneider Electric SE
product: Modicon Premium
vendor: Schneider Electric SE
product: Modicon Quantum
Published: 2019-09-17T19:50:29.000Z
CVE-2019-6810 
CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Schneider Electric SE
product: BMXNOR0200H Ethernet / Serial RTU module
Published: 2019-09-17T19:52:38.000Z
CVE-2019-6811 
An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.
Problem types: cwe_id: CWE-754
description: Improper Check for Unusual or Exceptional Conditions (CWE-754)
Affected products: vendor: Schneider Electric SE
product: Modicon Quantum 140 NOE771x1
Published: 2019-09-17T19:55:08.000Z
CVE-2019-6812 
A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol.
Problem types: cwe_id: CWE-798
description: CWE-798: Use of hardcoded credentials
Affected products: vendor: n/a
product: Modicon RTU Module, BMX-NOR-0200H with firmware versions prior to V1.7 IR 19
Published: 2019-05-22T19:48:25.000Z
CVE-2019-6813 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: CVE-2019-6813
product: BMXNOR0200H Ethernet / Serial RTU module
vendor: CVE-2019-6813
product: Modicon M340 controller
Published: 2019-09-17T19:56:55.000Z
CVE-2019-6814 
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: n/a
product: ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê
Published: 2019-05-22T19:38:32.000Z
CVE-2019-6815 
In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol.
Problem types: description: Multiple Vulnerabilities
Affected products: vendor: n/a
product: Modicon Quantum - all firmware versions
Published: 2019-05-22T19:52:28.000Z
CVE-2019-6816 
In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.
Problem types: description: Multiple Vulnerabilities
Affected products: vendor: n/a
product: Modicon Quantum - all firmware versions
Published: 2019-05-22T19:54:08.000Z
CVE-2019-6819 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: n/a
product: Modicon Controllers, Modicon M340 - firmware versions prior to V3.01 Modicon M580 - firmware versions prior to V2.80 All firmware versions of Modicon Quantum and Modicon Premium
Published: 2019-05-22T19:45:08.000Z
CVE-2019-6820 
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: Modicon and PacDrive Controller, All versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Published: 2019-05-22T19:40:20.000Z
CVE-2019-6821 
CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.
Problem types: cwe_id: CWE-330
description: CWE-330: Use of Insufficiently Random Values
Affected products: vendor: n/a
product: Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum
Published: 2019-05-22T19:42:06.000Z
CVE-2019-6822 
A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Zelio Soft
product: Zelio Soft 2 V5.2 and prior
Published: 2019-07-15T20:46:39.000Z
CVE-2019-6823 
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
Problem types: cwe_id: CWE-94
description: CWE-94: Code Injection
Affected products: vendor: ProClima
product: ProClima all versions prior to version 8.0.0
Published: 2019-07-15T20:41:51.000Z
CVE-2019-6824 
A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
Problem types: cwe_id: CWE-119
description: CWE-119: Buffer Errors
Affected products: vendor: ProClima
product: ProClima all versions prior to version 8.0.0
Published: 2019-07-15T20:44:14.000Z
CVE-2019-6825 
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: ProClima
product: ProClima all versions prior to version 8.0.0
Published: 2019-07-15T20:45:14.000Z
CVE-2019-6826 
A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product.
Problem types: cwe_id: CWE-426
description: CWE-426: Untrusted Search Path
Affected products: vendor: Schneider Electric SE
product: SoMachine HVAC
Published: 2019-09-17T19:57:55.000Z
CVE-2019-6827 
A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: n/a
product: Interactive Graphical SCADA System (IGSS)  Version 14 and prior
Published: 2019-07-15T20:47:48.000Z
CVE-2019-6828 
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Problem types: cwe_id: CWE-248
description: CWE-248: Uncaught Exception
Affected products: vendor: Schneider Electric SE
product: Modicon M580
vendor: Schneider Electric SE
product: Modicon M340
vendor: Schneider Electric SE
product: Modicon Premium
vendor: Schneider Electric SE
product: Modicon Quantum
Published: 2019-09-17T19:59:33.000Z
CVE-2019-6829 
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.
Problem types: cwe_id: CWE-248
description: A CWE-248: Uncaught Exception
Affected products: vendor: Schneider Electric SE
product: Modicon M580
vendor: Schneider Electric SE
product: Modicon M340
Published: 2019-09-17T19:44:12.000Z
CVE-2019-6830 
A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.
Problem types: cwe_id: CWE-248
description: CWE-248: Uncaught Exception
Affected products: vendor: Schneider Electric SE
product: Modicon M580
Published: 2019-09-17T19:21:12.000Z
CVE-2019-6831 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on port 2404/TCP.
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: Schneider Electric SE
product: BMXNOR0200H Ethernet / Serial RTU module
Published: 2019-09-17T19:22:59.000Z
CVE-2019-6832 
A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control when an attacker bypasses the authentication.
Problem types: cwe_id: CWE-287
description: CWE-287: Authentication
Affected products: vendor: Schneider Electric SE
product: spaceLYnk
vendor: Schneider Electric SE
product: Wiser for KNX
Published: 2019-09-17T19:31:14.000Z
CVE-2019-6833 
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Problem types: cwe_id: CWE-754
description: CWE-754 – Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: Schneider Electric SE
product: Magelis HMI Panels
Published: 2019-09-17T19:36:57.000Z
CVE-2019-6834 
A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0)
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Schneider Electric
product: Software Update (SESU) – SUT Service component
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-03-28T16:25:19.000Z
CVE-2019-6835 
A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.
Problem types: cwe_id: CWE-79
description: Cross-Site Scripting (XSS) CWE-79
Affected products: vendor: Schneider Electric SE
product: U.motion Server
Published: 2019-09-17T19:13:26.000Z
CVE-2019-6836 
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: n/a
product: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1)
Published: 2019-09-17T19:14:36.000Z
CVE-2019-6837 
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
Problem types: cwe_id: CWE-918
description: Server-Side Request Forgery (SSRF): CWE-918
Affected products: vendor: CVE-2019-6837
product: U.motion Server
Published: 2019-09-17T19:15:34.000Z
CVE-2019-6838 
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: n/a
product: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1)
Published: 2019-09-17T19:16:38.000Z
CVE-2019-6839 
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: n/a
product: U.motion Servers (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, and MEG6260-0415 - U.motion KNX Server Plus, Touch 1)
Published: 2019-09-17T19:17:33.000Z
CVE-2019-6840 
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
Problem types: cwe_id: CWE-134
description: Format String: CWE-134
Affected products: vendor: Schneider Electric SE
product: U.motion Server
Published: 2019-09-17T19:19:36.000Z
CVE-2019-6841 
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol.
Problem types: cwe_id: CWE-755
description: CWE-755: Improper Handling of Exceptional Conditions
Affected products: vendor: n/a
product: Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
Published: 2019-10-29T14:46:24.000Z