rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-27376 
An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T03:35:36.000Z
CVE-2021-27377 
An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T03:35:20.000Z
CVE-2021-27378 
An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T03:35:07.000Z
CVE-2021-27379 
An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T15:05:25.000Z
CVE-2021-27380 
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12532)
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: Solid Edge SE2020
vendor: Siemens
product: Solid Edge SE2021
Published: 2021-03-15T17:03:31.000Z
CVE-2021-27381 
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534)
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Siemens
product: Solid Edge SE2020
vendor: Siemens
product: Solid Edge SE2021
Published: 2021-03-15T17:03:31.000Z
CVE-2021-27382 
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13040)
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: Solid Edge SE2020
vendor: Siemens
product: Solid Edge SE2020
vendor: Siemens
product: Solid Edge SE2021
Published: 2021-04-22T20:42:21.000Z
CVE-2021-27383 
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition.
Problem types: cwe_id: CWE-770
description: CWE-770: Allocation of Resources Without Limits or Throttling
Affected products: vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V15
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V16
vendor: Siemens
product: SINAMICS GH150
vendor: Siemens
product: SINAMICS GL150 (with option X30)
vendor: Siemens
product: SINAMICS GM150 (with option X30)
vendor: Siemens
product: SINAMICS SH150
vendor: Siemens
product: SINAMICS SL150
vendor: Siemens
product: SINAMICS SM120
vendor: Siemens
product: SINAMICS SM150
vendor: Siemens
product: SINAMICS SM150i
Published: 2021-05-12T13:18:22.000Z
CVE-2021-27384 
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.
Problem types: cwe_id: CWE-788
description: CWE-788: Access of Memory Location After End of Buffer
Affected products: vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V15
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V16
vendor: Siemens
product: SINAMICS GH150
vendor: Siemens
product: SINAMICS GL150 (with option X30)
vendor: Siemens
product: SINAMICS GM150 (with option X30)
vendor: Siemens
product: SINAMICS SH150
vendor: Siemens
product: SINAMICS SL150
vendor: Siemens
product: SINAMICS SM120
vendor: Siemens
product: SINAMICS SM150
vendor: Siemens
product: SINAMICS SM150i
Published: 2021-05-12T13:18:22.000Z
CVE-2021-27385 
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). A remote attacker could send specially crafted packets to SmartVNC device layout handler on client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V15
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V16
vendor: Siemens
product: SINAMICS GH150
vendor: Siemens
product: SINAMICS GL150 (with option X30)
vendor: Siemens
product: SINAMICS GM150 (with option X30)
vendor: Siemens
product: SINAMICS SH150
vendor: Siemens
product: SINAMICS SL150
vendor: Siemens
product: SINAMICS SM120
vendor: Siemens
product: SINAMICS SM150
vendor: Siemens
product: SINAMICS SM150i
Published: 2021-05-12T13:18:23.000Z
CVE-2021-27386 
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the device layout handler on client side, which could result in a Denial-of-Service condition.
Problem types: cwe_id: CWE-401
description: CWE-401: Missing Release of Memory after Effective Lifetime
Affected products: vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants)
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V15
vendor: Siemens
product: SIMATIC WinCC Runtime Advanced V16
vendor: Siemens
product: SINAMICS GH150
vendor: Siemens
product: SINAMICS GL150 (with option X30)
vendor: Siemens
product: SINAMICS GM150 (with option X30)
vendor: Siemens
product: SINAMICS SH150
vendor: Siemens
product: SINAMICS SL150
vendor: Siemens
product: SINAMICS SM120
vendor: Siemens
product: SINAMICS SM150
vendor: Siemens
product: SINAMICS SM150i
Published: 2021-05-12T13:18:23.000Z
CVE-2021-27387 
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27399. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12819)
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: Simcenter Femap 2020.2
vendor: Siemens
product: Simcenter Femap 2021.1
Published: 2021-06-08T19:47:16.000Z
CVE-2021-27388 
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: SINAMICS Medium Voltage Products, Remote Access
Published: 2021-06-15T19:40:24.000Z
CVE-2021-27389 
A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: Opcenter Quality
vendor: Siemens
product: QMS Automotive
Published: 2021-04-22T20:42:21.000Z
CVE-2021-27390 
A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13131)
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: JT2Go
vendor: Siemens
product: Teamcenter Visualization
Published: 2021-06-08T19:47:16.000Z
CVE-2021-27391 
A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the device with root privileges.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Siemens
product: APOGEE MBC (PPC) (P2 Ethernet)
vendor: Siemens
product: APOGEE MEC (PPC) (P2 Ethernet)
vendor: Siemens
product: APOGEE PXC Compact (BACnet)
vendor: Siemens
product: APOGEE PXC Compact (P2 Ethernet)
vendor: Siemens
product: APOGEE PXC Modular (BACnet)
vendor: Siemens
product: APOGEE PXC Modular (P2 Ethernet)
vendor: Siemens
product: TALON TC Compact (BACnet)
vendor: Siemens
product: TALON TC Modular (BACnet)
Published: 2021-09-14T10:47:31.000Z
CVE-2021-27392 
A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2). Affected Open Network Bridges store user credentials for the authentication between ONVIF clients and ONVIF server using a hard-coded key. The encrypted credentials can be retrieved via the MIP SDK. This could allow an authenticated remote attacker to retrieve and decrypt all credentials stored on the ONVIF server.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
vendor: Siemens
product: Siveillance Video Open Network Bridge
Published: 2021-04-22T20:42:21.000Z
CVE-2021-27393 
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Problem types: cwe_id: CWE-330
description: CWE-330: Use of Insufficiently Random Values
Affected products: vendor: Siemens
product: Nucleus NET
vendor: Siemens
product: Nucleus ReadyStart V3
vendor: Siemens
product: Nucleus Source Code
Published: 2021-04-22T20:42:21.000Z
CVE-2021-27394 
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Siemens
product: Mendix Applications using Mendix 7
vendor: Siemens
product: Mendix Applications using Mendix 8
vendor: Siemens
product: Mendix Applications using Mendix 8 (V8.12)
vendor: Siemens
product: Mendix Applications using Mendix 8 (V8.6)
vendor: Siemens
product: Mendix Applications using Mendix 9
Published: 2021-04-16T20:00:14.000Z
CVE-2021-27395 
A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). An interface in the software that is used for critical functionalities lacks authentication, which could allow a malicious user to maliciously insert, modify or delete data.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Siemens
product: SIMATIC Process Historian 2013 and earlier
vendor: Siemens
product: SIMATIC Process Historian 2014
vendor: Siemens
product: SIMATIC Process Historian 2019
vendor: Siemens
product: SIMATIC Process Historian 2020
Published: 2021-10-12T09:49:20.000Z
CVE-2021-27396 
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13279)
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: Tecnomatix Plant Simulation
Published: 2021-05-12T13:18:23.000Z
CVE-2021-27397 
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13287)
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Siemens
product: Tecnomatix Plant Simulation
Published: 2021-05-12T13:18:23.000Z
CVE-2021-27398 
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13290)
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: Tecnomatix Plant Simulation
Published: 2021-05-12T13:18:23.000Z
CVE-2021-27399 
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27387. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12820)
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: Simcenter Femap 2020.2
vendor: Siemens
product: Simcenter Femap 2021.1
Published: 2021-06-08T19:47:16.000Z
CVE-2021-27400 
HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-22T16:48:07.000Z