rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-25110 
An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T22:59:38.000Z
CVE-2020-25111 
An issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check for the IPv6 header length. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T23:00:39.000Z
CVE-2020-25112 
An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T23:01:24.000Z
CVE-2020-25115 
The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:20:44.000Z
CVE-2020-25116 
The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:20:26.000Z
CVE-2020-25117 
The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:20:14.000Z
CVE-2020-25118 
The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:19:59.000Z
CVE-2020-25119 
The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:19:47.000Z
CVE-2020-25120 
The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:19:32.000Z
CVE-2020-25121 
The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:19:19.000Z
CVE-2020-25122 
The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:19:09.000Z
CVE-2020-25123 
The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:18:59.000Z
CVE-2020-25124 
The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:18:45.000Z
CVE-2020-25125 
GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T17:48:07.000Z
CVE-2020-25130 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. Sending an improper variable type of Array allows a bypass of core SQL Injection sanitization. Authenticated users are able to inject malicious SQL queries. This vulnerability leads to full database leak including ckeys that can be used in the authentication process without knowing the username and cleartext password. This can occur via the ajax/actions.php group_id field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T13:45:20.000Z
CVE-2020-25131 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the role_name or role_descr parameter to the roles/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T13:56:00.000Z
CVE-2020-25132 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. Sending the improper variable type Array allows a bypass of core SQL Injection sanitization. Users are able to inject malicious statements in multiple functions. This vulnerability leads to full authentication bypass: any unauthorized user with access to the application is able to exploit this vulnerability. This can occur via the Cookie header to the default URI, within includes/authenticate.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:03:41.000Z
CVE-2020-25133 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /ports/?format=../ URIs to pages/ports.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:13:31.000Z
CVE-2020-25134 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /settings/?format=../ URIs to pages/settings.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:19:24.000Z
CVE-2020-25135 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the graph_title parameter to the graphs/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:22:03.000Z
CVE-2020-25136 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=routing&proto=../ URIs to device/routing.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:26:24.000Z
CVE-2020-25137 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the alert_name or alert_message parameter to the /alert_check URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T16:28:09.000Z
CVE-2020-25138 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via /alert_check/action=delete_alert_checker/alert_test_id= because of pages/alert_check.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T16:30:05.000Z
CVE-2020-25139 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for delete_syslog_rule, because of syslog_rules.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T16:31:59.000Z
CVE-2020-25140 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur in pages/contacts.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T16:33:30.000Z
CVE-2020-25141 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via a /device/device=140/tab=wifi/view= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:31:16.000Z
CVE-2020-25142 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable if any links and forms lack an unpredictable CSRF token. Without such a token, attackers can forge malicious requests, such as for adding Device Settings via the /addsrv URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:33:29.000Z
CVE-2020-25143 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via /ajax/device_entities.php?entity_type=netscalervsvr&device_id[]= because of /ajax/device_entities.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:35:52.000Z
CVE-2020-25144 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /apps/?app=../ URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:38:37.000Z
CVE-2020-25145 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=ports&view=../ URIs because of device/port.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:42:47.000Z
CVE-2020-25146 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for edit_syslog_rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:44:58.000Z
CVE-2020-25147 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via username[0] to the default URI, because of includes/authenticate.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:47:11.000Z
CVE-2020-25148 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. this can occur via /iftype/type= because of pages/iftype.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:50:15.000Z
CVE-2020-25149 
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=health&metric=../ because of device/health.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T17:53:25.000Z
CVE-2020-25150 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.
Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:52.000Z
CVE-2020-25151 
The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 (all versions).
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: NIO 50
Published: 2020-11-13T15:35:58.000Z
CVE-2020-25152 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.
Problem types: cwe_id: CWE-384
description: CWE-384: Session Fixation
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:55.000Z
CVE-2020-25153 MOXA NPort IAW5000A-I/O Series
The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords.
Problem types: cwe_id: CWE-521
description: CWE-521: Weak Password Requirements
Affected products: vendor: MOXA
product: NPort IAW5000A-I/O
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Evgeniy Druzhinin and Ilya Karpov of Rostelecom-Solar reported these vulnerabilities to CISA
Published: 2020-12-23T14:08:34.327Z
CVE-2020-25154 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites.
Problem types: cwe_id: CWE-601
description: CWE-601: Open Redirect
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:58.000Z
CVE-2020-25155 
The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 (all versions).
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
Affected products: vendor: n/a
product: NIO 50
Published: 2020-11-13T15:32:55.000Z
CVE-2020-25156 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.
Problem types: cwe_id: CWE-489
description: CWE-489: Active Debug Code
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:53.000Z
CVE-2020-25157 
The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information.
Problem types: description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USE IN AN SQL COMMAND ('SQL INJECTION')
Affected products: vendor: n/a
product: Advantech R-SeeNet
Published: 2020-10-20T21:40:26.000Z
CVE-2020-25158 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.
Problem types: cwe_id: CWE-79
description: CWE-79: Cross-site Scripting
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:56.000Z
CVE-2020-25159 Real Time Automation EtherNet/IP
499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: Real Time Automation
product: 499ES EtherNet/IP (ENIP) Adaptor Source Code
Published: 2020-11-24T19:12:51.664Z
CVE-2020-25160 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: B. Braun Melsungen AG
product: SpaceCom
vendor: B. Braun Melsungen AG
product: Battery pack with Wi-Fi
vendor: B. Braun Melsungen AG
product: Data module compactplus
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).
Published: 2022-04-14T20:05:55.000Z
CVE-2020-25161 
The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an administrator.
Problem types: cwe_id: CWE-73
description: EXTERNAL CONTROL OF FILE NAME OR PATH CWE-73
Affected products: vendor: n/a
product: Advantech WebAccess/SCADA
Published: 2021-02-23T16:14:20.000Z