rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-47327 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:46.317Z
CVE-2022-47328 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:47.489Z
CVE-2022-47329 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:48.450Z
CVE-2022-47330 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:49.399Z
CVE-2022-47331 
In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:49.877Z
CVE-2022-47332 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:51.564Z
CVE-2022-47333 
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:53.182Z
CVE-2022-47334 
In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-05-09T01:21:38.138Z
CVE-2022-47335 
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-04-11T11:09:42.407Z
CVE-2022-47336 
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-04-11T11:09:43.390Z
CVE-2022-47337 
In media service, there is a missing permission check. This could lead to local denial of service in media service.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-04-11T11:09:44.468Z
CVE-2022-47338 
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-04-11T11:09:45.470Z
CVE-2022-47339 
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:48.923Z
CVE-2022-47340 
In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-05-09T01:21:22.843Z
CVE-2022-47341 
In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:50.823Z
CVE-2022-47342 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:51.748Z
CVE-2022-47343 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:52.674Z
CVE-2022-47344 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:54.649Z
CVE-2022-47345 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:55.612Z
CVE-2022-47346 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:56.561Z
CVE-2022-47347 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:57.480Z
CVE-2022-47348 
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:58.469Z
CVE-2022-47350 
In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:45.656Z
CVE-2022-47351 
In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:45.958Z
CVE-2022-47352 
In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:11.753Z
CVE-2022-47353 
In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:12.037Z
CVE-2022-47354 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:26:59.409Z
CVE-2022-47355 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:00.648Z
CVE-2022-47356 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:01.663Z
CVE-2022-47357 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:02.609Z
CVE-2022-47358 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:24.571Z
CVE-2022-47359 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:25.512Z
CVE-2022-47360 
In log service, there is a missing permission check. This could lead to local denial of service in log service.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:27.298Z
CVE-2022-47361 
In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:28.253Z
CVE-2022-47362 
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-04-11T11:09:47.453Z
CVE-2022-47363 
In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:56.529Z
CVE-2022-47364 
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:57.464Z
CVE-2022-47365 
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:58.670Z
CVE-2022-47366 
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:59.628Z
CVE-2022-47367 
In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:28:01.632Z
CVE-2022-47368 
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:28:02.578Z
CVE-2022-47369 
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:28:03.509Z
CVE-2022-47370 
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:28:04.461Z
CVE-2022-47371 
In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:28:05.408Z
CVE-2022-47372 Stored cross-site scripting vulnerability in create event section
Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.


Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Artica PFMS
product: Pandora FMS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
version: 3.1
Published: 2023-02-15T00:00:00.000Z
CVE-2022-47373 Reflected Cross Site Scripting in Search Functionality of Module Library
Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: LOW
baseScore: 6.4
baseSeverity: MEDIUM
Published: 2023-02-15T00:00:00.000Z
CVE-2022-47374 
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly.

This could allow an attacker to exhaust system resources and create a denial of service condition for the device.
Problem types: cwe_id: CWE-674
description: CWE-674: Uncontrolled Recursion
Affected products: vendor: Siemens
product: SIMATIC PC-Station Plus
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 412-2 PN V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 414-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 414F-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 416-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 416F-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SINAMICS S120 (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIPLUS S7-400 CPU 414-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIPLUS S7-400 CPU 416-3 PN/DP V7
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2023-12-12T11:25:31.314Z
CVE-2022-47375 
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly.

This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
Problem types: cwe_id: CWE-805
description: CWE-805: Buffer Access with Incorrect Length Value
Affected products: vendor: Siemens
product: SIMATIC PC-Station Plus
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 412-2 PN V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 414-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 414F-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 416-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIMATIC S7-400 CPU 416F-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SINAMICS S120 (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIPLUS S7-400 CPU 414-3 PN/DP V7
default_status: unknown
vendor: Siemens
product: SIPLUS S7-400 CPU 416-3 PN/DP V7
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2023-12-12T11:25:32.533Z
CVE-2022-47376 
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data.
Problem types: cwe_id: CWE-257
description: CWE-257: Storing Passwords in a Recoverable Format
Affected products: vendor: n/a
product: Alaris Infusion Central
Published: 2023-06-13T00:00:00.000Z
CVE-2022-47377 
Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.13.4 as soon as possible (available in SICK Support Portal).
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: n/a
product: SICK SIM2000ST (LFT PPC)
Published: 2022-12-16T00:00:00.000Z