rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-41957 Vim double free in src/alloc.c:616
Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags,
but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647
Problem types: cwe_id: CWE-415
description: CWE-415: Double Free
Affected products: vendor: vim
product: vim
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2024-08-01T21:41:42.921Z
CVE-2024-41958 Two-Factor Authentication (2FA) Bypass in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication (2FA) mechanism. This flaw allows an authenticated attacker to bypass the 2FA protection, enabling unauthorized access to other accounts that are otherwise secured with 2FA. To exploit this vulnerability, the attacker must first have access to an account within the system and possess the credentials of the target account that has 2FA enabled. By leveraging these credentials, the attacker can circumvent the 2FA process and gain access to the protected account. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Problem types: cwe_id: CWE-697
description: CWE-697: Incorrect Comparison
Affected products: vendor: mailcow
product: mailcow-dockerized
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N
version: 3.1
Published: 2024-08-05T19:59:44.744Z
CVE-2024-41959 Cross-site Scripting (XSS) via API Logs in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API logs. This payload is executed whenever the API logs page is viewed, potentially allowing an attacker to run malicious scripts in the context of the user's browser. This could lead to unauthorized actions, data theft, or further exploitation of the affected system. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: mailcow
product: mailcow-dockerized
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.1
Published: 2024-08-05T19:59:46.318Z
CVE-2024-41960 Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scripts in the context of the user's browser. This could lead to data theft, or further exploitation. This issue has been addressed in the `2024-07` release. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: mailcow
product: mailcow-dockerized
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2024-08-05T19:59:48.492Z
CVE-2024-41961 Elektra vulnerable to remote code execution in universal search
Elektra is an opinionated Openstack Dashboard for Operators and Consumers of Openstack Services. A code injection vulnerability was found in the live search functionality of the Ruby on Rails based Elektra web application. An authenticated user can craft a search term containing Ruby code, which later flows into an `eval` sink which executes the code. Fixed in commit 8bce00be93b95a6512ff68fe86bf9554e486bc02.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: sapcc
product: elektra
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.2
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H/E:X/RL:O/RC:C
version: 3.1
Published: 2024-08-01T14:33:46.684Z
CVE-2024-41962 Bostr Improper Authorization
Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorized_keys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: Yonle
product: bostr
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Published: 2024-08-01T16:30:57.629Z
CVE-2024-41964 Insufficient permission checks in the language settings in Kirby CMS
Kirby is a CMS targeting designers and editors. Kirby allows to restrict the permissions of specific user roles. Users of that role can only perform permitted actions. Permissions for creating and deleting languages have already existed and could be configured, but were not enforced by Kirby's frontend or backend code. A permission for updating existing languages has not existed before the patched versions. So disabling the languages.* wildcard permission for a role could not have prohibited updates to existing language definitions. The missing permission checks allowed attackers with Panel access to manipulate the language definitions. The problem has been patched in Kirby 3.6.6.6, Kirby 3.7.5.5, Kirby 3.8.4.4, Kirby 3.9.8.2, Kirby 3.10.1.1, and Kirby 4.3.1. Please update to one of these or a later version to fix the vulnerability. There are no known workarounds for this vulnerability.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: getkirby
product: kirby
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-08-29T16:19:21.676Z
CVE-2024-41965 Vim < v9.1.0648 has a double-free in dialog_changed()
Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a name yet. However, when setting the buffer name to Unnamed, Vim will falsely free a pointer twice, leading to a double-free and possibly later to a heap-use-after-free, which can lead to a crash. The issue has been fixed as of Vim patch v9.1.0648.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: vim
product: vim
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2024-08-01T21:44:09.056Z
CVE-2024-41967 WAGO: Boot Mode Manipulation in Multiple Devices
A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC100 G1 0750-810x/xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 750-820x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 0750-820x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:03:57.513Z
CVE-2024-41968 WAGO: Docker Settings Manipulation in Multiple Devices
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC100 G1 0750-810x/xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 750-820x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 0750-820x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:03:20.948Z
CVE-2024-41969 WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC100 G1 0750-810x/xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 750-820x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G1 0750-820x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:04:13.691Z
CVE-2024-41970 WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:04:27.334Z
CVE-2024-41971 WAGO: Arbitrary File Overwrite in Multiple Devices
A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:04:42.052Z
CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
Problem types: cwe_id: CWE-35
description: CWE-35 Path Traversal: '.../...//'
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:04:56.284Z
CVE-2024-41973 WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
Problem types: cwe_id: CWE-35
description: CWE-35 Path Traversal: '.../...//'
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:05:15.892Z
CVE-2024-41974 WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: WAGO
product: CC100 0751-9x01
default_status: unaffected
vendor: WAGO
product: PFC100 G2 0750-811x-xxxx-xxxx
default_status: unaffected
vendor: WAGO
product: PFC200 G2 750-821x-xxx-xxx
default_status: unaffected
vendor: WAGO
product: TP600 0762-420x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-430x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-520x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-530x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-620x/8000-000x
default_status: unaffected
vendor: WAGO
product: TP600 0762-630x/8000-000x
default_status: unaffected
vendor: WAGO
product: Edge Controller 0752-8303/8000-0002
default_status: unaffected
vendor: WAGO
product: PFC200 G2 0750-821x/xxx-xxx
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
vendor: WAGO
product: CC100 0751/9x01
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
version: 3.1
Credits: lang: en
value: Diego Giubertoni
lang: en
value: Nozomi Networks
Published: 2024-11-18T09:05:32.043Z
CVE-2024-41975 CODESYS (Edge) Gateway for Windows insecure default
An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
Problem types: cwe_id: CWE-1188
description: CWE-1188 Insecure Default Initialization of Resource
Affected products: vendor: CODESYS
product: CODESYS Edge Gateway
default_status: unaffected
vendor: CODESYS
product: CODESYS Gateway for Windows
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Diego Guibertoni from Nozomi Networks
Published: 2025-03-18T11:04:26.013Z