rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-40568 
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). An internal session termination functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to terminate legitimate users' sessions.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: RUGGEDCOM RST2428P
default_status: unknown
vendor: Siemens
product: SCALANCE XCH328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM324
default_status: unknown
vendor: Siemens
product: SCALANCE XCM328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM332
default_status: unknown
vendor: Siemens
product: SCALANCE XRH334 (24 V DC, 8xFO, CC)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-06-10T15:17:31.304Z
CVE-2025-40569 
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Siemens
product: RUGGEDCOM RST2428P
default_status: unknown
vendor: Siemens
product: SCALANCE XCH328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM324
default_status: unknown
vendor: Siemens
product: SCALANCE XCM328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM332
default_status: unknown
vendor: Siemens
product: SCALANCE XRH334 (24 V DC, 8xFO, CC)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
baseScore: 4.8
baseSeverity: MEDIUM
Published: 2025-06-10T15:17:33.607Z
CVE-2025-40571 
A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9 compatible) (All versions < V3.3.1), Mendix OIDC SSO V4.2 (Mendix 10 compatible) (All versions < V4.2.1), Mendix OIDC SSO V4.3 (Mendix 10 compatible) (All versions). The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development.
Problem types: cwe_id: CWE-266
description: CWE-266: Incorrect Privilege Assignment
Affected products: vendor: Siemens
product: Mendix OIDC SSO (Mendix 10.12 compatible)
default_status: unknown
vendor: Siemens
product: Mendix OIDC SSO (Mendix 9 compatible)
default_status: unknown
vendor: Siemens
product: Mendix OIDC SSO V4.2 (Mendix 10 compatible)
default_status: unknown
vendor: Siemens
product: Mendix OIDC SSO V4.3 (Mendix 10 compatible)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
baseScore: 2.2
baseSeverity: LOW
Published: 2025-05-13T09:38:54.270Z
CVE-2025-40572 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.
This could allow a non-privileged local attacker to access sensitive information stored on the device.
Problem types: cwe_id: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2025-05-13T09:38:55.568Z
CVE-2025-40573 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks.
This could allow a privileged local attacker to restore backups that are outside the backup folder.
Problem types: cwe_id: CWE-35
description: CWE-35: Path Traversal: '.../...//'
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
baseScore: 4.4
baseSeverity: MEDIUM
Published: 2025-05-13T09:38:56.842Z
CVE-2025-40574 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.
This could allow a non-privileged local attacker to interact with the backupmanager service.
Problem types: cwe_id: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.8
baseSeverity: HIGH
Published: 2025-05-13T09:38:58.108Z
CVE-2025-40575 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd
process.
Problem types: cwe_id: CWE-457
description: CWE-457: Use of Uninitialized Variable
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-05-13T09:38:59.396Z
CVE-2025-40576 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.
Problem types: cwe_id: CWE-476
description: CWE-476: NULL Pointer Dereference
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:00.716Z
CVE-2025-40577 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:02.819Z
CVE-2025-40578 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession.
An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short time frame, which leads to a crash of the dcpd process.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:04.250Z
CVE-2025-40579 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow.
This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
baseScore: 6.7
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:05.634Z
CVE-2025-40580 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow.
This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
baseScore: 6.7
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:07.185Z
CVE-2025-40581 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass.
This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
baseScore: 7.1
baseSeverity: HIGH
Published: 2025-05-13T09:39:08.719Z
CVE-2025-40582 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do not properly sanitize configuration parameters.
This could allow a non-privileged local attacker to execute root commands on the device.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.8
baseSeverity: HIGH
Published: 2025-05-13T09:39:10.166Z
CVE-2025-40583 
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext.
This could allow a privileged local attacker to retrieve this sensitive information.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Siemens
product: SCALANCE LPE9403
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
baseScore: 4.4
baseSeverity: MEDIUM
Published: 2025-05-13T09:39:11.578Z
CVE-2025-40584 
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference
Affected products: vendor: Siemens
product: SIMOTION SCOUT TIA V5.4
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT TIA V5.5
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT TIA V5.6
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT TIA V5.7
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT V5.4
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT V5.5
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT V5.6
default_status: unknown
vendor: Siemens
product: SIMOTION SCOUT V5.7
default_status: unknown
vendor: Siemens
product: SINAMICS STARTER V5.5
default_status: unknown
vendor: Siemens
product: SINAMICS STARTER V5.6
default_status: unknown
vendor: Siemens
product: SINAMICS STARTER V5.7
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2025-08-12T11:17:02.605Z
CVE-2025-40585 
A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device.
Problem types: cwe_id: CWE-276
description: CWE-276: Incorrect Default Permissions
Affected products: vendor: Siemens
product: Energy Services
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
baseScore: 9.9
baseSeverity: CRITICAL
Published: 2025-06-10T15:17:35.035Z
CVE-2025-40587 
A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: Polarion V2404
default_status: unknown
vendor: Siemens
product: Polarion V2410
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
baseScore: 7.6
baseSeverity: HIGH
Published: 2026-02-10T09:58:39.154Z
CVE-2025-40591 
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'Log Viewers' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute the 'tail' command with root privileges and disclose contents of all files in the filesystem.
Problem types: cwe_id: CWE-602
description: CWE-602: Client-Side Enforcement of Server-Side Security
Affected products: vendor: Siemens
product: RUGGEDCOM ROX MX5000
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX MX5000RE
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1400
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1500
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1501
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1510
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1511
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1512
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1524
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX1536
default_status: unknown
vendor: Siemens
product: RUGGEDCOM ROX RX5000
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
baseScore: 7.7
baseSeverity: HIGH
Published: 2025-06-10T15:17:36.336Z
CVE-2025-40592 
A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.23.0), Mendix Studio Pro 10.12 (All versions < V10.12.17), Mendix Studio Pro 10.18 (All versions < V10.18.7), Mendix Studio Pro 10.6 (All versions < V10.6.24), Mendix Studio Pro 11 (All versions < V11.0.0), Mendix Studio Pro 8 (All versions < V8.18.35), Mendix Studio Pro 9 (All versions < V9.24.35). A zip path traversal vulnerability exists in the module installation process of Studio Pro. By crafting a malicious module and distributing it via (for example) the Mendix Marketplace, an attacker could write or modify arbitrary files in directories outside a developer’s project directory upon module installation.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: Mendix Studio Pro 10
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 10.12
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 10.18
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 10.6
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 11
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 8
default_status: unknown
vendor: Siemens
product: Mendix Studio Pro 9
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
baseScore: 6.1
baseSeverity: MEDIUM
Published: 2025-06-12T08:05:09.385Z
CVE-2025-40593 
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens
product: SIMATIC CN 4100
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2025-07-08T10:34:51.157Z
CVE-2025-40594 
A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Siemens
product: SINAMICS G220 V6.4
default_status: unknown
vendor: Siemens
product: SINAMICS S200 V6.4
default_status: unknown
vendor: Siemens
product: SINAMICS S210 V6.4
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L
baseScore: 6.3
baseSeverity: MEDIUM
Published: 2025-09-09T08:47:57.771Z
CVE-2025-40595 
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: SonicWall
product: SMA1000
default_status: unknown
Published: 2025-05-14T16:35:54.647Z
CVE-2025-40596 
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: SonicWall
product: SMA 100 Series
default_status: unknown
Credits: lang: en
value: Sina Kheirkhah
Published: 2025-07-23T14:46:24.199Z