yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-44106: API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Key phrases: api permission management, features to perform abnormally
CVE-2023-44107:  Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity.
Key phrases: defects, service availability, integrity
CVE-2023-44108: Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
Key phrases: type confusion, restart
CVE-2023-44109: Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: clone, service confidentiality
CVE-2023-4411: A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: os command injection, disclosure
CVE-2023-44110: Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.
Key phrases: out-of-bounds access, availability, out of bounds access
CVE-2023-44111: Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: brute-force, service confidentiality
CVE-2023-44112: Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
Key phrases: out-of-bounds access, affect confidentiality, out of bounds access
CVE-2023-44113: Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: service confidentiality
CVE-2023-44114: Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: out-of-bounds array, service confidentiality
CVE-2023-44115: Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: vulnerability of improper permission control, service confidentiality, improper permissions
CVE-2023-44116: Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.
Key phrases: vulnerability of access permissions
CVE-2023-44117: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: vulnerability of trust relationships, service confidentiality
CVE-2023-44118: Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality.
Key phrases: undefined permissions, availability, confidentiality
CVE-2023-44119: Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
Key phrases: vulnerability of mutual exclusion management, availability
CVE-2023-4412: A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: os command injection, disclosure
CVE-2023-44120: A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.
Key phrases: inject arbitrary code, gain root access, inject arbitrary code and gain root access
CVE-2023-44121: The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action "com.lge.lms.things.notification.ACTION". Additionally, this vulnerability is very dangerous because LG ThinQ Service is a system app (having android:sharedUserId="android.uid.system" setting). Intent redirection in this app leads to accessing arbitrary not exported activities of absolutely all apps.
Key phrases: intent redirection
CVE-2023-44122: The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The LockScreenSettings app copies the received file to the "/data/shared/dw/mycategory/wallpaper_01.png" path and then changes the file access mode to world-readable and world-writable.
Key phrases: return arbitrary data, arbitrary file
CVE-2023-44123: The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag. 
Key phrases: implicit pendingintents, theft, arbitrary file
CVE-2023-44124: The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The Screen recording app saves contents of arbitrary URIs to SD card which is a world-readable storage.
Key phrases: return arbitrary data, arbitrary file
CVE-2023-44125: The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.abba") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag.
Key phrases: implicit pendingintents, theft, arbitrary file
CVE-2023-44126: The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
CVE-2023-44127: he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.
Key phrases: implicit intents
CVE-2023-44128: he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.InstallService" service that exposes an AIDL interface. All its "installPackage*" methods are finally calling the "installPackageVerify()" method that performs signature validation after the delete file method. An attacker can control conditions so this security check is never performed and an attacker-controlled file is deleted.
Key phrases: delete arbitrary files
CVE-2023-44129: The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the "com.lge.message.action.QCLIP" action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the "onActivityResult()" method, they would have access to arbitrary content providers that have the `android:grantUriPermissions="true"` flag set.
CVE-2023-4414: A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: command injection, disclosure
CVE-2023-44141: Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.
Key phrases: conduct a code injection attack by having a, inkdrop
CVE-2023-44143: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1.
Key phrases: Stored XSS.This issue affects Bamboo Columns: from, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-44144: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin <=3.2.7 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-44145: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jesweb.Dev Anchor Episodes Index (Spotify for Podcasters) plugin <=2.1.7 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-44146: Cross-Site Request Forgery (CSRF) vulnerability in Checkfront Inc. Checkfront Online Booking System plugin <=3.6 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4415: A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: improper authentication, disclosure
CVE-2023-44150: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content  ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content  ProfilePress: from n/a through 4.13.2.
Key phrases: exposure of sensitive information
CVE-2023-44152: Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
Key phrases: sensitive information disclosure, manipulation, improper authentication
CVE-2023-44153: Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
Key phrases: sensitive information disclosure, cleartext storage
CVE-2023-44154: Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, manipulation, improper authorization
CVE-2023-44155: Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information leak
CVE-2023-44156: Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, spell-jacking
CVE-2023-44157: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.
Key phrases: local privilege escalation, insecure folder permissions
CVE-2023-44158: Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, insufficient token field masking
CVE-2023-44159: Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, cleartext storage
CVE-2023-44160: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: cross-site request forgery, sensitive information, cross site request forgery
CVE-2023-44161: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: cross-site request forgery, sensitive information, cross site request forgery
CVE-2023-44163: The 'search' parameter of the process_search.php resourcedoes not validate the characters received and theyare sent unfiltered to the database.
Key phrases: unfiltered
CVE-2023-44164: The 'Email' parameter of the process_login.php resourcedoes not validate the characters received and theyare sent unfiltered to the database.
Key phrases: unfiltered
CVE-2023-44166: The 'age' parameter of the process_registration.php resourcedoes not validate the characters received and theyare sent unfiltered to the database.
Key phrases: unfiltered
CVE-2023-44169: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.
Key phrases: arbitrary file write
CVE-2023-4417: Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.
Key phrases: inadvertently share their personal vault entry with shared, improper access controls, incorrect vault
CVE-2023-44170: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php.
Key phrases: arbitrary file write
CVE-2023-44171: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.
Key phrases: arbitrary file write
CVE-2023-44172: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.
Key phrases: arbitrary file write
CVE-2023-44173: Online Movie Ticket Booking System v1.0 is vulnerable toan authenticated Reflected Cross-Site Scripting vulnerability.
Key phrases: reflected cross-site scripting
CVE-2023-44174: Online Movie Ticket Booking System v1.0 is vulnerable toan authenticated Stored Cross-Site Scripting vulnerability.
Key phrases: stored cross-site scripting
CVE-2023-44175: A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS).Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.Note: This issue is not noticed when all the devices in the network are Juniper devices.This issue affects Juniper Networks:Junos OS:  *  All versions prior to 20.4R3-S7;  *  21.2 versions prior to 21.2R3-S5;  *  21.3 versions prior to 21.3R3-S4;  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S4;  *  22.2 versions prior to 22.2R3;  *  22.3 versions prior to 22.3R3;  *  22.4 versions prior to 22.4R3.Junos OS Evolved:  *  All versions prior to 22.3R3-EVO;  *  22.4-EVO versions prior to 22.4R3-EVO;  *  23.2-EVO versions prior to 23.2R1-EVO.
Key phrases: Denial of Service (DoS), send specific genuine PIM packets to the device, reachable assertion, denial of service (dos), crash
CVE-2023-44176: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service.Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition.This issue affects Juniper Networks:Junos OS:  *  All versions prior to 20.4R3-S8;  *  21.2 versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  22.1 versions prior to 22.1R3-S3;  *  22.3 versions prior to 22.3R3;  *  22.4 versions prior to 22.4R3.
Key phrases: Denial of Service (DoS), execute a specific CLI commands leading to Denial, stack-based buffer overflow, denial of service, repeated actions, sustained denial of service (dos) condition
CVE-2023-44177: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service.Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition.This issue affects Juniper Networks:Junos OS:  *  All versions prior to 19.1R3-S10;  *  19.2 versions prior to 19.2R3-S7;  *  19.3 versions prior to 19.3R3-S8;  *  19.4 versions prior to 19.4R3-S12;  *  20.2 versions prior to 20.2R3-S8;  *  20.4 versions prior to 20.4R3-S8;  *  21.2 versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S3;  *  22.2 versions prior to 22.2R3-S1;  *  22.3 versions prior to 22.3R3;  *  22.4 versions prior to 22.4R2.Junos OS Evolved:  *  All versions prior to 20.4R3-S8-EVO;  *  21.2 versions prior to 21.2R3-S6-EVO;  *  21.3 versions prior to 21.3R3-S5-EVO;  *  21.4 versions prior to 21.4R3-S4-EVO;  *  22.1 versions prior to 22.1R3-S3-EVO;  *  22.2 versions prior to 22.2R3-S1-EVO;  *  22.3 versions prior to 22.3R3-EVO;  *  22.4 versions prior to 22.4R2-EVO.
Key phrases: Denial of Service (DoS), execute a specific CLI commands leading to Denial, stack-based buffer overflow, denial of service, sustained denial of service (dos) condition
CVE-2023-44178: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service.Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition.This issue affects Juniper Networks:Junos OS  *  All versions prior to 19.1R3-S10;  *  19.2 versions prior to 19.2R3-S7;  *  19.3 versions prior to 19.3R3-S8;  *  19.4 versions prior to 19.4R3-S12;  *  20.2 versions prior to 20.2R3-S8;  *  20.4 versions prior to 20.4R3-S8;  *  21.2 versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S5;  *  22.1 versions prior to 22.1R3-S3;  *  22.2 versions prior to 22.2R3-S2;  *  22.3 versions prior to 22.3R3-S1;  *  22.4 versions prior to 22.4R2-S1;  *  23.2 versions prior to 23.2R2.
Key phrases: Denial of Service (DoS), execute a specific CLI commands leading to Denial, stack-based buffer overflow, denial of service, repeated actions, sustained denial of service (dos) condition
CVE-2023-4418: A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
Key phrases: tcp syn-based denial-of-service (ddos), unresponsive, availability, denial of service
CVE-2023-44181: An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog.This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device.This issue affects Juniper Networks:Junos OS  *  All versions prior to 20.2R3-S6 on QFX5k;  *  20.3 versions prior to 20.3R3-S5 on QFX5k;  *  20.4 versions prior to 20.4R3-S5 on QFX5k;  *  21.1 versions prior to 21.1R3-S4 on QFX5k;  *  21.2 versions prior to 21.2R3-S3 on QFX5k;  *  21.3 versions prior to 21.3R3-S2 on QFX5k;  *  21.4 versions prior to 21.4R3 on QFX5k;  *  22.1 versions prior to 22.1R3 on QFX5k;  *  22.2 versions prior to 22.2R2 on QFX5k.
Key phrases: be punted to ARP queue causing a l2, standard
CVE-2023-44182: An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web User Interfaces causes unintended effects such as demotion or elevation of privileges associated with an operators actions to occur.Multiple scenarios may occur; for example: privilege escalation over the device or another account, access to files that should not otherwise be accessible, files not being accessible where they should be accessible, code expected to run as non-root may run as root, and so forth.This issue affects:Juniper Networks Junos OS  *  All versions prior to 20.4R3-S7;  *  21.1 versions prior to 21.1R3-S5;  *  21.2 versions prior to 21.2R3-S5;  *  21.3 versions prior to 21.3R3-S4;  *  21.4 versions prior to 21.4R3-S3;  *  22.1 versions prior to 22.1R3-S2;  *  22.2 versions prior to 22.2R2-S2, 22.2R3;  *  22.3 versions prior to 22.3R1-S2, 22.3R2.Juniper Networks Junos OS Evolved  *  All versions prior to 21.4R3-S3-EVO;  *  22.1-EVO version 22.1R1-EVO and later versions prior to 22.2R2-S2-EVO, 22.2R3-EVO;  *  22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.
Key phrases: unchecked return value, unintended effects, elevation privilege, privilege escalation
CVE-2023-44183: An Improper Input Validation vulnerability in the VxLAN packet forwarding engine (PFE) of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an unauthenticated, adjacent attacker, sending two or more genuine packets in the same VxLAN topology to possibly cause a DMA memory leak to occur under various specific operational conditions. The scenario described here is the worst-case scenario. There are other scenarios that require operator action to occur.An indicator of compromise may be seen when multiple devices indicate that FPC0 has gone missing when issuing a show chassis fpc command for about 10 to 20 minutes, and a number of interfaces have also gone missing.Use the following command to determine if FPC0 has gone missing from the device.show chassis fpc detailThis issue affects:Juniper Networks Junos OS on QFX5000 Series, EX4600 Series:  *  18.4 version 18.4R2 and later versions prior to 20.4R3-S8;  *  21.1 version 21.1R1 and later versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S3;  *  22.2 versions prior to 22.2R3-S1;  *  22.3 versions prior to 22.3R2-S2, 22.3R3;  *  22.4 versions prior to 22.4R2.
Key phrases: possibly cause a DMA memory leak to occur, improper input validation, dma memory leak, worst-case scenario
CVE-2023-44184: An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon (mgd) process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU Denial of Service to the device's control plane.This issue affects:Juniper Networks Junos OS  *  All versions prior to 20.4R3-S7;  *  21.2 versions prior to 21.2R3-S5;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S2;  *  22.2 versions prior to 22.2R3;  *  22.3 versions prior to 22.3R2-S1, 22.3R3;  *  22.4 versions prior to 22.4R1-S2, 22.4R2.Juniper Networks Junos OS Evolved  *  All versions prior to 21.4R3-S4-EVO;  *  22.1 versions prior to 22.1R3-S2-EVO;  *  22.2 versions prior to 22.2R3-EVO;  *  22.3 versions prior to 22.3R3-EVO;  *  22.4 versions prior to 22.4R2-EVO.An indicator of compromise can be seen by first determining if the NETCONF client is logged in and fails to log out after a reasonable period of time and secondly reviewing the WCPU percentage for the mgd process by running the following command:mgd process example:user@device-re#> show system processes extensive | match "mgd|PID" | except lastPID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND92476 root 100 0 500M 89024K CPU3 3 57.5H 89.60% mgd <<<<<<<<<<< review the high cpu percentage.Example to check for NETCONF activity:While there is no specific command that shows a specific session in use for NETCONF, you can review logs for UI_LOG_EVENT with "client-mode 'netconf'"For example:mgd[38121]: UI_LOGIN_EVENT: User 'root' login, class 'super-user' [38121], ssh-connection '10.1.1.1 201 55480 10.1.1.2 22', client-mode 'netconf'
Key phrases: cause a CPU Denial of Service to the, improper restriction of operations, cpu denial of service
CVE-2023-44185: An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet.Continued receipt of this packet will cause a sustained Denial of Service condition.This issue affects:  *  Juniper Networks Junos OS:  *  All versions prior to 20.4R3-S6;  *  21.1 versions prior to 21.1R3-S5;  *  21.2 versions prior to 21.2R3-S4;  *  21.3 versions prior to 21.3R3-S3;  *  21.4 versions prior to 21.4R3-S3;  *  22.1 versions prior to 22.1R2-S2, 22.1R3;  *  22.2 versions prior to 22.2R2-S1, 22.2R3;  *  22.3 versions prior to 22.3R1-S2, 22.3R2.Juniper Networks Junos OS Evolved:  *  All versions prior to 20.4R3-S6-EVO;  *  21.1-EVO version 21.1R1-EVO and later versions prior to 21.2R3-S4-EVO;  *  21.3-EVO versions prior to 21.3R3-S3-EVO;  *  21.4-EVO versions prior to 21.4R3-S3-EVO;  *  22.1-EVO versions prior to 22.1R3-EVO;  *  22.2-EVO versions prior to 22.2R2-S1-EVO, 22.2R3-EVO;  *  22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.
Key phrases: Denial of Service (DoS ), cause a Denial of Service (DoS ), improper input validation, denial of service (dos )
CVE-2023-44186: An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.This issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.This issue affects:Juniper Networks Junos OS:  *  All versions prior to 20.4R3-S8;  *  21.1 versions 21.1R1 and later;  *  21.2 versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S5;  *  22.1 versions prior to 22.1R3-S4;  *  22.2 versions prior to 22.2R3-S2;  *  22.3 versions prior to 22.3R2-S2, 22.3R3-S1;  *  22.4 versions prior to 22.4R2-S1, 22.4R3.Juniper Networks Junos OS Evolved  *  All versions prior to 20.4R3-S8-EVO;  *  21.1 versions 21.1R1-EVO and later;  *  21.2 versions prior to 21.2R3-S6-EVO;  *  21.3 versions prior to 21.3R3-S5-EVO;  *  21.4 versions prior to 21.4R3-S5-EVO;  *  22.1 versions prior to 22.1R3-S4-EVO;  *  22.2 versions prior to 22.2R3-S2-EVO;  *  22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;  *  22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.
Key phrases: Denial of Service (DoS), send a BGP update message with an AS, improper handling of exceptional conditions, denial of service (dos)
CVE-2023-44187: An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system.This issue affects Juniper Networks Junos OS Evolved:  *  All versions prior to 20.4R3-S7-EVO;  *  21.1 versions 21.1R1-EVO and later;  *  21.2 versions prior to 21.2R3-S5-EVO;  *  21.3 versions prior to 21.3R3-S4-EVO;  *  21.4 versions prior to 21.4R3-S4-EVO;  *  22.1 versions prior to 22.1R3-S2-EVO;  *  22.2 versions prior to 22.2R2-EVO.
Key phrases: view passwords supplied on the CLI command-, exposure of sensitive information, unauthorized access
CVE-2023-44188: A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in telemetry processing of Juniper Networks Junos OS allows a network-based authenticated attacker to flood the system with multiple telemetry requests, causing the Junos Kernel Debugging Streaming Daemon (jkdsd) process to crash, leading to a Denial of Service (DoS). Continued receipt and processing of telemetry requests will repeatedly crash the jkdsd process and sustain the Denial of Service (DoS) condition.This issue is seen on all Junos platforms. The crash is triggered when multiple telemetry requests come from different collectors. As the load increases, the Dynamic Rendering Daemon (drend) decides to defer processing and continue later, which results in a timing issue accessing stale memory, causing the jkdsd process to crash and restart.Note: jkdsd is not shipped with SRX Series devices and therefore are not affected by this vulnerability.This issue affects:Juniper Networks Junos OS:  *  20.4 versions prior to 20.4R3-S9;  *  21.1 versions 21.1R1 and later;  *  21.2 versions prior to 21.2R3-S6;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S5;  *  22.1 versions prior to 22.1R3-S4;  *  22.2 versions prior to 22.2R3-S2;  *  22.3 versions prior to 22.3R2-S1, 22.3R3-S1;  *  22.4 versions prior to 22.4R2-S2, 22.4R3;  *  23.1 versions prior to 23.1R2.This issue does not affect Juniper Networks Junos OS versions prior to 19.4R1.
Key phrases: Denial of Service (DoS), flood the system with multiple telemetry requests, time-of-check time-of-use (toctou) race condition, denial of service (dos), crash
CVE-2023-44189: An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to this issue, the router will start forwarding traffic if a valid route is present in forwarding-table, causing a loop and congestion in the downstream layer-2 domain connected to the device.This issue affects Juniper Networks Junos OS Evolved on PTX10003 Series:  *  All versions prior to 21.4R3-S4-EVO;  *  22.1 versions prior to 22.1R3-S3-EVO;  *  22.2 version 22.2R1-EVO and later versions;  *  22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;  *  22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;  *  23.2 versions prior to 23.2R2-EVO.
Key phrases: bypass MAC address checking, reach the adjacent LAN to be forwarded to, origin validation, congestion
CVE-2023-4419: The LMS5xx uses hard-coded credentials, which potentially allow low-skilledunauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.
Key phrases: reconfigure settings and /or disrupt the functionality of, hard-coded credentials, disrupt the functionality of the device, hard coded credentials
CVE-2023-44190: An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to this issue, the router will start forwarding traffic if a valid route is present in forwarding-table, causing a loop and congestion in the downstream layer-2 domain connected to the device.This issue affects Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016:  *  All versions prior to 21.4R3-S5-EVO;  *  22.1 versions prior to 22.1R3-S4-EVO;  *  22.2 versions 22.2R1-EVO and later;  *  22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;  *  22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;  *  23.2 versions prior to 23.2R1-S1-EVO, 23.2R2-EVO.
Key phrases: bypass MAC address checking, reach the adjacent LAN to be forwarded to, origin validation, congestion
CVE-2023-44191: An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).On all Junos OS QFX5000 Series and EX4000 Series platforms, when a high number of VLANs are configured, a specific DHCP packet will cause PFE hogging which will lead to dropping of socket connections.This issue affects:Juniper Networks Junos OS on QFX5000 Series and EX4000 Series  *  21.1 versions prior to 21.1R3-S5;  *  21.2 versions prior to 21.2R3-S5;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S3;  *  22.2 versions prior to 22.2R3-S1;  *  22.3 versions prior to 22.3R2-S2, 22.3R3;  *  22.4 versions prior to 22.4R2.This issue does not affect Juniper Networks Junos OS versions prior to 21.1R1
Key phrases: Denial of Service (DoS), cause Denial of Service (DoS).On all Junos, allocation of resources without limits or throttling, denial of service (dos), pfe hogging
CVE-2023-44192: An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause memory leak, leading to Denial of Service (DoS).On all Junos OS QFX5000 Series platforms, when pseudo-VTEP (Virtual Tunnel End Point) is configured under EVPN-VXLAN scenario, and specific DHCP packets are transmitted, DMA memory leak is observed. Continuous receipt of these specific DHCP packets will cause memory leak to reach 99% and then cause the protocols to stop working and traffic is impacted, leading to Denial of Service (DoS) condition. A manual reboot of the system recovers from the memory leak.To confirm the memory leak, monitor for "sheaf:possible leak" and "vtep not found" messages in the logs.This issue affects:Juniper Networks Junos OS QFX5000 Series:  *  All versions prior to 20.4R3-S6;  *  21.1 versions prior to 21.1R3-S5;  *  21.2 versions prior to 21.2R3-S5;  *  21.3 versions prior to 21.3R3-S4;  *  21.4 versions prior to 21.4R3-S3;  *  22.1 versions prior to 22.1R3-S2;  *  22.2 versions prior to 22.2R2-S2, 22.2R3;  *  22.3 versions prior to 22.3R2-S1, 22.3R3;  *  22.4 versions prior to 22.4R1-S2, 22.4R2.
Key phrases: Denial of Service (DoS), cause memory leak, improper input validation, denial of service (dos), dma memory leak, traffic, reboot
CVE-2023-44193: An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a local, low privileged attacker to cause an FPC crash, leading to Denial of Service (DoS).On all Junos MX Series with MPC1 - MPC9, LC480, LC2101, MX10003, and MX80, when Connectivity-Fault-Management (CFM) is enabled in a VPLS scenario, and a specific LDP related command is run, an FPC will crash and reboot. Continued execution of this specific LDP command can lead to sustained Denial of Service condition.This issue affects:Juniper Networks Junos OS on MX Series:  *  All versions prior to 20.4R3-S7;  *  21.1 versions prior to 21.1R3-S5;  *  21.2 versions prior to 21.2R3-S4;  *  21.3 versions prior to 21.3R3-S4;  *  21.4 versions prior to 21.4R3-S3;  *  22.1 versions prior to 22.1R3-S1;  *  22.2 versions prior to 22.2R2-S1, 22.2R3;  *  22.3 versions prior to 22.3R1-S2, 22.3R2.
Key phrases: Denial of Service (DoS), cause an FPC crash, last reference, denial of service (dos), reboot
CVE-2023-44194: An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privileges. The issue is caused by improper directory permissions on a certain system directory, allowing an attacker with access to this directory to create a backdoor with root privileges.This issue affects Juniper Networks Junos OS:  *  All versions prior to 20.4R3-S5;  *  21.1 versions prior to 21.1R3-S4;  *  21.2 versions prior to 21.2R3-S4;  *  21.3 versions prior to 21.3R3-S3;  *  21.4 versions prior to 21.4R3-S1.
Key phrases: the device to create a backdoor with root, this directory to create a backdoor with root, incorrect default permissions, root privilege
CVE-2023-44195: An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon (nsagentd) of Juniper Networks Junos OS Evolved allows an unauthenticated network based attacker to cause limited impact to the availability of the system.If specific packets reach the Routing-Engine (RE) these will be processed normally even if firewall filters are in place which should have prevented this. This can lead to a limited, increased consumption of resources resulting in a Denial-of-Service (DoS), and unauthorized access.CVE-2023-44196 is a prerequisite for this issue.This issue affects Juniper Networks Junos OS Evolved:  *  21.3-EVO versions prior to 21.3R3-S5-EVO;  *  21.4-EVO versions prior to 21.4R3-S4-EVO;  *  22.1-EVO version 22.1R1-EVO and later;  *  22.2-EVO version 22.2R1-EVO and later;  *  22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;  *  22.4-EVO versions prior to 22.4R3-EVO.This issue doesn't not affected Junos OS Evolved versions prior to 21.3R1-EVO.
Key phrases: cause limited impact to the availability of the, improper restriction of communication channel, denial-of-service (dos)
CVE-2023-44196: An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on PTX10003 Series allows an unauthenticated adjacent attacker to cause an impact to the integrity of the system.When specific transit MPLS packets are received by the PFE, these packets are internally forwarded to the RE. This issue is a prerequisite for CVE-2023-44195.This issue affects Juniper Networks Junos OS Evolved:  *  All versions prior to 20.4R3-S8-EVO;  *  21.1-EVO version 21.1R1-EVO and later;  *  21.2-EVO versions prior to 21.2R3-S6-EVO;  *  21.3-EVO version 21.3R1-EVO and later;  *  21.4-EVO versions prior to 21.4R3-S3-EVO;  *  22.1-EVO versions prior to 22.1R3-S4-EVO;  *  22.2-EVO versions prior to 22.2R3-S3-EVO;  *  22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-EVO;  *  22.4-EVO versions prior to 22.4R2-EVO.
Key phrases: cause an impact to the integrity of the, integrity of the system
CVE-2023-44197: An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).On all Junos OS and Junos OS Evolved devices an rpd crash and restart can occur while processing BGP route updates received over an established BGP session. This specific issue is observed for BGP routes learned via a peer which is configured with a BGP import policy that has hundreds of terms matching IPv4 and/or IPv6 prefixes.This issue affects Juniper Networks Junos OS:  *  All versions prior to 20.4R3-S8;  *  21.1 version 21.1R1 and later versions;  *  21.2 versions prior to 21.2R3-S2;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R2-S1, 21.4R3-S5.This issue affects Juniper Networks Junos OS Evolved:  *  All versions prior to 20.4R3-S8-EVO;  *  21.1-EVO version 21.1R1-EVO and later versions;  *  21.2-EVO versions prior to 21.2R3-S2-EVO;  *  21.3-EVO version 21.3R1-EVO and later versions;  *  21.4-EVO versions prior to 21.4R2-S1-EVO, 21.4R3-S5-EVO.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).On all, out-of-bounds write, denial of service (dos), crash
CVE-2023-44198: An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks.If the SIP ALG is configured and a device receives a specifically malformed SIP packet, the device prevents this packet from being forwarded, but any subsequently received retransmissions of the same packet are forwarded as if they were valid.This issue affects Juniper Networks Junos OS on SRX Series and MX Series:  *  20.4 versions prior to 20.4R3-S5;  *  21.1 versions prior to 21.1R3-S4;  *  21.2 versions prior to 21.2R3-S4;  *  21.3 versions prior to 21.3R3-S3;  *  21.4 versions prior to 21.4R3-S2;  *  22.1 versions prior to 22.1R2-S2, 22.1R3;  *  22.2 versions prior to 22.2R2-S1, 22.2R3;  *  22.3 versions prior to 22.3R1-S2, 22.3R2.This issue doesn't not affected releases prior to 20.4R1.
Key phrases: cause an integrity impact in connected networks, improper check for unusual or exceptional conditions
CVE-2023-44199: An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.This issue affects Juniper Networks Junos OS on MX Series:  *  All versions prior to 20.4R3-S4;  *  21.1 version 21.1R1 and later versions;  *  21.2 versions prior to 21.2R3-S2;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3;  *  22.1 versions prior to 22.1R3;  *  22.2 versions prior to 22.2R1-S1, 22.2R2.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).On Junos, unusual or exceptional conditions, denial of service (dos), crash
CVE-2023-4420: A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potentially manipulate the data being transmitted.
Key phrases: man-in-the-middle, weakness, disclosure, sensitive information
CVE-2023-44201: An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker to read configuration changes without having the permissions.When a user with the respective permissions commits a configuration change, a specific file is created. That file is readable even by users with no permissions to access the configuration. This can lead to privilege escalation as the user can read the password hash when a password change is being committed.This issue affects:Juniper Networks Junos OS  *  All versions prior to 20.4R3-S4;  *  21.1 versions prior to 21.1R3-S4;  *  21.2 versions prior to 21.2R3-S2;  *  21.3 versions prior to 21.3R2-S2, 21.3R3-S1;  *  21.4 versions prior to 21.4R2-S1, 21.4R3.Juniper Networks Junos OS Evolved  *  All versions prior to 20.4R3-S4-EVO;  *  21.1 versions prior to 21.1R3-S2-EVO;  *  21.2 versions prior to 21.2R3-S2-EVO;  *  21.3 versions prior to 21.3R3-S1-EVO;  *  21.4 versions prior to 21.4R2-S2-EVO.
Key phrases: read configuration changes without having the permissions, incorrect permission assignment for critical resource, privilege escalation
CVE-2023-44203: An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600 allows a adjacent attacker to send specific traffic, which leads to packet flooding, resulting in a Denial of Service (DoS).When a specific IGMP packet is received in an isolated VLAN, it is duplicated to all other ports under the primary VLAN, which causes a flood.This issue affects QFX5000 series, EX2300, EX3400, EX4100, EX4400 and EX4600 platforms only.This issue affects Juniper Junos OS on on QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600:  *  All versions prior to 20.4R3-S5;  *  21.1 versions prior to 21.1R3-S4;  *  21.2 versions prior to 21.2R3-S3;  *  21.3 versions prior to 21.3R3-S5;  *  21.4 versions prior to 21.4R3-S2;  *  22.1 versions prior to 22.1R3;  *  22.2 versions prior to 22.2R3;  *  22.3 versions prior to 22.3R2.
Key phrases: Denial of Service (DoS), send specific traffic, exceptional conditions, denial of service (dos)
CVE-2023-44204: An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).When a malformed BGP UPDATE packet is received over an established BGP session, the rpd crashes and restarts.This issue affects both eBGP and iBGP implementations.This issue affects:Juniper Networks Junos OS  *  21.4 versions prior to 21.4R3-S4;  *  22.1 versions prior to 22.1R3-S3;  *  22.2 versions prior to 22.2R3-S2;  *  22.3 versions prior to 22.3R2-S2, 22.3R3;  *  22.4 versions prior to 22.4R2-S1, 22.4R3;  *  23.2 versions prior to 23.2R1, 23.2R2;Juniper Networks Junos OS Evolved  *  21.4 versions prior to 21.4R3-S5-EVO;  *  22.1 versions prior to 22.1R3-S3-EVO;  *  22.2 versions prior to 22.2R3-S3-EVO;  *  22.3 versions prior to 22.3R2-S2-EVO;  *  22.4 versions prior to 22.4R3-EVO;  *  23.2 versions prior to 23.2R2-EVO;
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS).When a, improper validation of syntactic correctness of input, denial of service (dos), crash
CVE-2023-44205: Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, improper authorization
CVE-2023-44206: Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Key phrases: sensitive information disclosure, manipulation, improper authorization