rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-22474 
IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Spectrum Protect Client
Published: 2022-06-30T16:25:16.784Z
CVE-2022-22475 
IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2022-05-17T16:25:23.272Z
CVE-2022-22476 
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: WebSphere Application Server Liberty
Published: 2022-07-08T17:45:25.568Z
CVE-2022-22477 
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: WebSphere Application Server
Published: 2022-07-14T16:25:23.112Z
CVE-2022-22478 
IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Client
Published: 2022-06-30T16:25:21.094Z
CVE-2022-22479 
IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 225887.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Spectrum Copy Data Management
Published: 2022-06-10T16:00:22.856Z
CVE-2022-22480 
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-10-07T17:00:25.939Z
CVE-2022-22481 
IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: i
Published: 2022-05-09T16:35:21.457Z
CVE-2022-22482 
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2022-05-17T16:25:24.741Z
CVE-2022-22483 
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2022-09-13T20:45:24.113Z
CVE-2022-22484 
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts' passwords. IBM X-Force ID: 226322.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Operations Center
Published: 2022-05-17T16:00:19.717Z
CVE-2022-22485 
In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Server
Published: 2022-06-17T15:20:14.355Z
CVE-2022-22486 IBM Tivoli Workload Scheduler XML external entity injection
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.  IBM X-Force ID:  226328.
Problem types: cwe_id: CWE-611
description: CWE-611 Improper Restriction of XML External Entity Reference
Affected products: vendor: IBM
product: Tivoli Workload Scheduler
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2023-02-02T17:45:36.250Z
CVE-2022-22487 
An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Server
Published: 2022-06-30T16:25:26.688Z
CVE-2022-22488 IBM OpenBMC denial of service
IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time.  IBM X-Force ID:  2226337.
Problem types: description: n/a
Affected products: vendor: IBM
product: OpenBMC
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-11-18T17:02:01.980Z
CVE-2022-22489 
IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: MQ
Published: 2022-08-19T18:50:10.108Z
CVE-2022-22490 
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Robotic Process Automation
Published: 2022-08-10T16:50:28.846Z
CVE-2022-22491 IBM App Connect Enterprise Certified Container denial of service
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: IBM
product: App Connect Enterprise Certified Container
cpes: cpe:2.3:a:ibm:app_connect_enterprise_certified_container:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:8.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:9.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:9.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:9.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:10.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:11.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:12.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:12.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:12.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:12.4:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-01-09T14:11:28.233Z
CVE-2022-22493 
IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: WebSphere Automation for Cloud Pak for Watson AIOps
Published: 2022-10-07T17:00:27.016Z
CVE-2022-22494 
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Operations Center
Published: 2022-06-30T16:50:34.927Z
CVE-2022-22495 
IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941.
Problem types: description: Data Manipulation
Affected products: vendor: IBM
product: i
Published: 2022-05-24T16:20:20.042Z
CVE-2022-22496 
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Server
Published: 2022-06-30T16:25:31.669Z
CVE-2022-22497 
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Aspera Faspex
Published: 2022-05-24T21:40:09.908Z
CVE-2022-22502 
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Robotic Process Automation
Published: 2022-06-24T15:35:27.667Z
CVE-2022-22503 
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 227125.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Robotic Process Automation
Published: 2022-10-06T17:15:25.355Z
CVE-2022-22505 
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Robotic Process Automation
Published: 2022-07-31T17:30:33.031Z
CVE-2022-22506 IBM Robotic Process Automation information disclosure
IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants.  IBM X-Force ID:  227293.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: IBM
product: Robotic Process Automation
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2024-02-12T19:09:56.754Z
CVE-2022-22508 CODESYS V3: Improper Input Validation
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: CODESYS V3
product: CODESYS Control RTE (SL)
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control RTE (for Beckhoff CX) SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control Win (SL)
default_status: unaffected
vendor: CODESYS V3
product: CODESYS HMI (SL)
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control Runtime System Toolkit
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for BeagleBone SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for emPC-A/iMX6 SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for IOT2000 SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for Linux SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for PFC100 SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for PFC200 SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for PLCnext SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for Raspberry Pi SL
default_status: unaffected
vendor: CODESYS V3
product: CODESYS Control for WAGO Touch Panels 600 SL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: icsbob
Published: 2023-05-15T09:27:38.793Z
CVE-2022-22509 PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was discovered internally.
Published: 2022-02-02T12:26:12.582Z
CVE-2022-22510 CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was found internally.
Published: 2022-02-02T12:26:13.400Z
CVE-2022-22511 WAGO PLCs WBM vulnerable to reflected XSS
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: WAGO
product: Compact Controller CC100 (751-9301)
vendor: WAGO
product: Edge Controller (752-8303/8000-002)
vendor: WAGO
product: Series PFC100 (750-81xx/xxx-xxx)
vendor: WAGO
product: Series PFC200 (750-82xx/xxx-xxx)
vendor: WAGO
product: Series Touch Panel 600 Advanced Line (762-5xxx)
vendor: WAGO
product: Series Touch Panel 600 Marine Line (762-6xxx)
vendor: WAGO
product: Series Touch Panel 600 Standard Line (762-4xxx)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: These vulnerabilities were reported to WAGO by: Mohamed Magdy Abumuslim, coordination done by CERT@VDE.
Published: 2022-03-09T19:38:43.516Z
CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials
Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: VARTA Storage
product: Element backup
default_status: unaffected
vendor: VARTA Storage
product: Element S1
default_status: unaffected
vendor: VARTA Storage
product: Element S2
default_status: unaffected
vendor: VARTA Storage
product: Element S2
default_status: unaffected
vendor: VARTA Storage
product: Element S3
default_status: unaffected
vendor: VARTA Storage
product: Element S3
default_status: unaffected
vendor: VARTA Storage
product: Element S4
default_status: unaffected
vendor: VARTA Storage
product: One L/XL
default_status: unaffected
vendor: VARTA Storage
product: Pulse (not pulse neo)
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Andreas Dolp
lang: en
value: CERT@VDE
Published: 2023-03-23T05:32:16.285Z
CVE-2022-22513 Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Gateway
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Edge Gateway for Linux
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-04-07T18:21:12.792Z