rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12432 
The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals account credentials via cookies or local storage. The attacker must first obtain an API access token, which can be accomplished if the attacker is able to upload a .docx or .odt file. The associated API endpoints for exploitation are /wopi/files and /wopi/getAccessToken.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-21T13:39:27.000Z
CVE-2020-12438 
An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-28T20:51:35.000Z
CVE-2020-12439 
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T21:19:39.000Z
CVE-2020-12441 
Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-06T18:53:54.000Z
CVE-2020-12442 
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-28T21:54:06.000Z
CVE-2020-12443 
BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFilename (mixed case) value has a ../ sequence. This can be leveraged for privilege escalation via a directory traversal to bigbluebutton.properties. NOTE: this issue exists because of an ineffective mitigation to CVE-2020-12112 in which there was an attempted fix within an NGINX configuration file, without considering that the relevant part of NGINX is case-insensitive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T01:48:39.000Z
CVE-2020-12446 
The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input from and output to I/O ports to local non-privileged users. This leads to privilege escalation to NT AUTHORITY\SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:54:28.000Z
CVE-2020-12447 
A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T02:28:51.000Z
CVE-2020-12448 
GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T16:20:49.000Z
CVE-2020-12456 
A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform directory traversal, and execute arbitrary scripts in the context of the Connect client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T18:07:29.000Z
CVE-2020-12457 
An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for TLS 1.3. If an attacker sends ChangeCipherSpec messages in a crafted way involving more than one in a row, the server becomes stuck in the ProcessReply() loop, i.e., a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-21T13:06:44.000Z
CVE-2020-12458 
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T15:57:05.000Z
CVE-2020-12459 
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T15:56:56.000Z
CVE-2020-12460 
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-27T22:52:35.000Z
CVE-2020-12461 
PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T16:14:26.000Z
CVE-2020-12462 
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T16:23:53.000Z
CVE-2020-12463 
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T21:18:38.000Z
CVE-2020-12464 
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T17:59:51.000Z
CVE-2020-12465 
An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T18:52:38.000Z
CVE-2020-12467 
Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:55.000Z
CVE-2020-12468 
Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:47.000Z
CVE-2020-12469 
admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:37.000Z
CVE-2020-12470 
MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:23.000Z
CVE-2020-12471 
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:15.000Z
CVE-2020-12472 
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:58:06.000Z
CVE-2020-12473 
MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T19:57:55.000Z
CVE-2020-12474 
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-01T13:45:28.000Z
CVE-2020-12475 
TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:36:04.000Z
CVE-2020-12477 
The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T21:49:33.000Z
CVE-2020-12478 
TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T21:49:25.000Z
CVE-2020-12479 
TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T21:49:16.000Z
CVE-2020-12480 
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-17T20:45:28.000Z
CVE-2020-12483 AppStore Remote Download and Installation Vulnerability
The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: vivo
product: appstore
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
version: 3.1
Published: 2021-03-23T16:15:00.995Z
CVE-2020-12484 
When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: vivo
product: Wifi
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
version: 3.1
Published: 2024-12-17T02:36:45.758Z
CVE-2020-12485 
The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: vivo
product: The frame touch module
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2020-11-10T15:31:38.958Z
CVE-2020-12487 Command Execution Vulnerability in ABE service
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: vivo
product: ABE
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
version: 3.1
Published: 2024-12-17T02:53:22.309Z
CVE-2020-12488 Broken Access Control Vulnerability in Jovi Smart Scene
The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: vivo
product: Jovi Smart Scene
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2021-11-10T15:49:58.016Z
CVE-2020-12491 Framework Information Disclosure Vulnerability
Improper control of framework service permissions with possibility of some sensitive device information leakage.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: vivo
product: Framework
default_status: unaffected
Published: 2024-11-25T10:08:14.791Z
CVE-2020-12492 Wifi information acquisition vulnerability in Framework Services
Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: vivo
product: Framework
default_status: unaffected
Published: 2024-11-25T10:11:30.761Z
CVE-2020-12493 Critical Vulnerability in SWARCO CPU LS4000
An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: SWARCO
product: CPU LS4000
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Martin Aman (ProtectEM) reported this vulnerability.
lang: en
value: Coordinated by CERT@VDE.
Published: 2020-05-29T17:27:54.803Z
CVE-2020-12494 Beckhoff: Etherleak in TwinCAT RT network driver
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames. By this method, memory content is disclosed, however, an attacker can hardly control which memory content is affected. For example, the disclosure can be provoked with small sized ICMP echo requests sent to the device.
Problem types: cwe_id: CWE-459
description: CWE-459 Incomplete Cleanup
Affected products: vendor: Beckhoff
product: TwinCat Driver for Intel 8254x (Tcl8254x.sys)
vendor: Beckhoff
product: TwinCat Driver for Intel 8255x (Tcl8255x.sys)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Beckhoff reported this vulnerability to CERT@VDE
Published: 2020-06-16T13:28:38.000Z
CVE-2020-12495 ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens". The vulnerability is that user sessions are not closed correctly and a user with fewer rights is assigned the higher rights when he logs on.
Problem types: cwe_id: CWE-269
description: CWE-269 Improper Privilege Management
Affected products: vendor: Endress+Hauser
product: RSG35 - Ecograph T
vendor: Endress+Hauser
product: ORSG35 - Ecograph T Neutral/Private Label
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Credits: lang: en
value: Maxim Rupp reported this vulnerability to CERT@VDE
Published: 2020-11-19T17:07:17.082Z
CVE-2020-12496 ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor
Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-control matrix on the server-side. It was found that a user with low rights can get information from endpoints that should not be available to this user.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Endress+Hauser
product: RSG35 - Ecograph T
vendor: Endress+Hauser
product: ORSG35 - Ecograph T Neutral/Private Label
vendor: Endress+Hauser
product: RSG45 - Memograph M
vendor: Endress+Hauser
product: ORSG45 - Memograph M Neutral/Private Label
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Maxim Rupp reported this vulnerability to CERT@VDE
Published: 2020-11-19T17:07:20.957Z
CVE-2020-12497 Phoenix Contact Automation Worx <= 1.87: stack-based overflow
PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Phoenix Contact
product: Automation Worx
vendor: Phoenix Contact
product: Automation Worx Express
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: reported by Natnael Samson working with Trend Micro Zero Day Initiative, Phoenix Contact reported to CERT@VDE
Published: 2020-07-01T15:52:35.000Z
CVE-2020-12498 Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution
mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Phoenix Contact
product: Automation Worx
vendor: Phoenix Contact
product: Automation Worx Express
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: reported by mdm working with Trend Micro Zero Day Initiative, Phoenix Contact reported to CERT@VDE
Published: 2020-07-01T15:52:35.000Z
CVE-2020-12499 PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: PHOENIX CONTACT
product: PLCnext Engineer
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was discovered and reported by Amir Preminger of Claroty.
lang: en
value: PHOENIX CONTACT reported the vulnerability to CERT@VDE.
Published: 2020-07-21T15:09:40.065Z