Common Weakness Enumeration
CWE-703
DiscouragedImproper Check or Handling of Exceptional Conditions
Abstraction: Pillar · Status: Incomplete
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
229 vulnerabilities reference this CWE, most recent first.
CVE-2023-34348 (GCVE-0-2023-34348)
Vulnerability from cvelistv5 – Published: 2024-01-18 17:16 – Updated: 2024-10-21 11:44
VLAI
EPSS
VEX
Title
Improper Check or Handling of Exceptional Conditions in Aveva PI Server
Summary
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-01-23 05:01 UTC
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/i… | government-resource |
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T16:10:06.138Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"government-resource",
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-018-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-34348",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-01-23T05:01:34.023375Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-21T11:44:39.250Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "PI Server",
"vendor": "Aveva",
"versions": [
{
"status": "affected",
"version": "2023"
},
{
"lessThanOrEqual": "2018 SP3 P05 ",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Aveva"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cp\u003eAVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.\u003c/p\u003e\u003cbr\u003e\n\n"
}
],
"value": "\nAVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.\n\n\n\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-18T17:16:50.038Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-018-01"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cp\u003eAll affected versions can be fixed by upgrading to AVEVA PI Server version 2023 Patch 1 or later. From \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://my.osisoft.com/\"\u003eOSI Soft Customer Portal\u003c/a\u003e, search for \u201cPI Server\u201d and select version \u201c2023 Patch 1\u201d.\u003c/p\u003e\u003cp\u003eFor an alternative fix, AVEVA PI Server 2018 SP3 Patch 5 and prior can be fixed by deploying AVEVA PI Server version 2018 SP3 Patch 6 or later. From \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://my.osisoft.com/\"\u003eOSI Soft Customer Portal\u003c/a\u003e, search for \u201cPI Server\u201d and select version \u201c2018 SP3 Patch 6\u201d.\u003c/p\u003e\u003cp\u003eAVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected products should apply security updates as soon as possible.\u003c/p\u003e\u003cp\u003eAVEVA recommends the following defensive measures:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSet the PI Message Subsystem to auto restart.\u003c/li\u003e\u003cli\u003eMonitor the memory usage of the PI Message Subsystem.\u003c/li\u003e\u003cli\u003eLimit network access to port 5450 to trusted workstations and software\u003c/li\u003e\u003cli\u003eConfirm that only authorized users have access to write to the PI Server Message Log. This is done through configuration of the PIMSGSS entry within the Database Security plugin accessible through PI System Management Tools.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003eFor more information on this vulnerability, including security updates, users should see security bulletin \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2024-001.pdf\"\u003eAVEVA-2024-001\u003c/a\u003e.\u003c/p\u003e\n\n\u003cbr\u003e"
}
],
"value": "\nAll affected versions can be fixed by upgrading to AVEVA PI Server version 2023 Patch 1 or later. From OSI Soft Customer Portal https://my.osisoft.com/ , search for \u201cPI Server\u201d and select version \u201c2023 Patch 1\u201d.\n\nFor an alternative fix, AVEVA PI Server 2018 SP3 Patch 5 and prior can be fixed by deploying AVEVA PI Server version 2018 SP3 Patch 6 or later. From OSI Soft Customer Portal https://my.osisoft.com/ , search for \u201cPI Server\u201d and select version \u201c2018 SP3 Patch 6\u201d.\n\nAVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected products should apply security updates as soon as possible.\n\nAVEVA recommends the following defensive measures:\n\n * Set the PI Message Subsystem to auto restart.\n * Monitor the memory usage of the PI Message Subsystem.\n * Limit network access to port 5450 to trusted workstations and software\n * Confirm that only authorized users have access to write to the PI Server Message Log. This is done through configuration of the PIMSGSS entry within the Database Security plugin accessible through PI System Management Tools.\n\n\nFor more information on this vulnerability, including security updates, users should see security bulletin AVEVA-2024-001 https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2024-001.pdf .\n\n\n\n\n"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper Check or Handling of Exceptional Conditions in Aveva PI Server ",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-34348",
"datePublished": "2024-01-18T17:16:50.038Z",
"dateReserved": "2023-07-12T18:40:13.110Z",
"dateUpdated": "2024-10-21T11:44:39.250Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-29195 (GCVE-0-2023-29195)
Vulnerability from cvelistv5 – Published: 2023-05-11 19:07 – Updated: 2025-01-24 21:28
VLAI
EPSS
VEX
Title
Vitess VTAdmin users that can create shards can deny access to other functions
Summary
Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing `/` characters from VTAdmin such that from that point on, anyone who tries to create a new shard from VTAdmin will receive an error. Attempting to view the keyspace(s) will also no longer work. Creating a shard using `vtctldclient` does not have the same problem because the CLI validates the input correctly. Version 16.0.2, corresponding to version 0.16.2 of the `go` module, contains a patch for this issue. Some workarounds are available. Always use `vtctldclient` to create shards, instead of using VTAdmin; disable creating shards from VTAdmin using RBAC; and/or delete the topology record for the offending shard using the client for your topology server.
Severity
4.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-01-24 21:28 UTC
CWE
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/vitessio/vitess/security/advis… | x_refsource_CONFIRM |
| https://github.com/vitessio/vitess/issues/12842 | x_refsource_MISC |
| https://github.com/vitessio/vitess/pull/12843 | x_refsource_MISC |
| https://github.com/vitessio/vitess/commit/9dcbd7d… | x_refsource_MISC |
| https://github.com/vitessio/vitess/releases/tag/v16.0.2 | x_refsource_MISC |
| https://pkg.go.dev/vitess.io/vitess@v0.16.2 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T14:00:15.882Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/vitessio/vitess/security/advisories/GHSA-pqj7-jx24-wj7w",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/security/advisories/GHSA-pqj7-jx24-wj7w"
},
{
"name": "https://github.com/vitessio/vitess/issues/12842",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/issues/12842"
},
{
"name": "https://github.com/vitessio/vitess/pull/12843",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/pull/12843"
},
{
"name": "https://github.com/vitessio/vitess/commit/9dcbd7de3180f47e94f54989fb5c66daea00c920",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/commit/9dcbd7de3180f47e94f54989fb5c66daea00c920"
},
{
"name": "https://github.com/vitessio/vitess/releases/tag/v16.0.2",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/releases/tag/v16.0.2"
},
{
"name": "https://pkg.go.dev/vitess.io/vitess@v0.16.2",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://pkg.go.dev/vitess.io/vitess@v0.16.2"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-29195",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-24T21:28:35.583348Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-24T21:28:41.799Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "vitess",
"vendor": "vitessio",
"versions": [
{
"status": "affected",
"version": "\u003c 16.0.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing `/` characters from VTAdmin such that from that point on, anyone who tries to create a new shard from VTAdmin will receive an error. Attempting to view the keyspace(s) will also no longer work. Creating a shard using `vtctldclient` does not have the same problem because the CLI validates the input correctly. Version 16.0.2, corresponding to version 0.16.2 of the `go` module, contains a patch for this issue. Some workarounds are available. Always use `vtctldclient` to create shards, instead of using VTAdmin; disable creating shards from VTAdmin using RBAC; and/or delete the topology record for the offending shard using the client for your topology server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-05-11T19:07:39.530Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vitessio/vitess/security/advisories/GHSA-pqj7-jx24-wj7w",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vitessio/vitess/security/advisories/GHSA-pqj7-jx24-wj7w"
},
{
"name": "https://github.com/vitessio/vitess/issues/12842",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/issues/12842"
},
{
"name": "https://github.com/vitessio/vitess/pull/12843",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/pull/12843"
},
{
"name": "https://github.com/vitessio/vitess/commit/9dcbd7de3180f47e94f54989fb5c66daea00c920",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commit/9dcbd7de3180f47e94f54989fb5c66daea00c920"
},
{
"name": "https://github.com/vitessio/vitess/releases/tag/v16.0.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/releases/tag/v16.0.2"
},
{
"name": "https://pkg.go.dev/vitess.io/vitess@v0.16.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://pkg.go.dev/vitess.io/vitess@v0.16.2"
}
],
"source": {
"advisory": "GHSA-pqj7-jx24-wj7w",
"discovery": "UNKNOWN"
},
"title": "Vitess VTAdmin users that can create shards can deny access to other functions"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-29195",
"datePublished": "2023-05-11T19:07:39.530Z",
"dateReserved": "2023-04-03T13:37:18.453Z",
"dateUpdated": "2025-01-24T21:28:41.799Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-29194 (GCVE-0-2023-29194)
Vulnerability from cvelistv5 – Published: 2023-04-14 18:42 – Updated: 2025-02-06 18:43
VLAI
EPSS
VEX
Title
vitess allows users to create keyspaces that can deny access to already existing keyspaces
Summary
Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces using `vtctldclient GetKeyspaces` will also return an error. Note that all other keyspaces can still be administered using the CLI (vtctldclient). This issue is fixed in version 16.0.1. As a workaround, delete the offending keyspace using a CLI client (vtctldclient).
Severity
4.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-06 18:43 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vitessio/vitess/security/advis… | x_refsource_CONFIRM |
| https://github.com/vitessio/vitess/commit/adf1019… | x_refsource_MISC |
| https://github.com/vitessio/vitess/commits/v0.16.1/ | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T14:00:15.865Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f"
},
{
"name": "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88"
},
{
"name": "https://github.com/vitessio/vitess/commits/v0.16.1/",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/vitessio/vitess/commits/v0.16.1/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-29194",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-06T18:43:44.701887Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-06T18:43:49.034Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "vitess",
"vendor": "vitessio",
"versions": [
{
"status": "affected",
"version": "\u003c 0.16.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces using `vtctldclient GetKeyspaces` will also return an error. Note that all other keyspaces can still be administered using the CLI (vtctldclient). This issue is fixed in version 16.0.1. As a workaround, delete the offending keyspace using a CLI client (vtctldclient)."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-14T18:42:54.461Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f"
},
{
"name": "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88"
},
{
"name": "https://github.com/vitessio/vitess/commits/v0.16.1/",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commits/v0.16.1/"
}
],
"source": {
"advisory": "GHSA-735r-hv67-g38f",
"discovery": "UNKNOWN"
},
"title": "vitess allows users to create keyspaces that can deny access to already existing keyspaces"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-29194",
"datePublished": "2023-04-14T18:42:54.461Z",
"dateReserved": "2023-04-03T13:37:18.453Z",
"dateUpdated": "2025-02-06T18:43:49.034Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28970 (GCVE-0-2023-28970)
Vulnerability from cvelistv5 – Published: 2023-04-17 00:00 – Updated: 2025-02-06 14:36
VLAI
EPSS
VEX
Title
Junos OS: JRR200: Kernel crash upon receipt of a specific packet
Summary
An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by an attacker on the local broadcast domain. Packets routed to the device are unable to trigger this crash. This issue affects Juniper Networks Junos OS on JRR200: All versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S4; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S2, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2; 22.4 versions prior to 22.4R1-S1, 22.4R2.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-06 14:36 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Juniper Networks | Junos OS |
Affected:
unspecified , < 21.2R3-S4
(custom)
Affected: 21.3 , < 21.3R3-S4 (custom) Affected: 21.4 , < 21.4R3-S3 (custom) Affected: 22.1 , < 22.1R3-S1 (custom) Affected: 22.2 , < 22.2R2-S2, 22.2R3 (custom) Affected: 22.3 , < 22.3R1-S2, 22.3R2 (custom) Affected: 22.4 , < 22.4R1-S1, 22.4R2 (custom) |
Date Public
2023-04-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:51:38.981Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://supportportal.juniper.net/JSA70594"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28970",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-06T14:36:43.233120Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-06T14:36:49.995Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"JRR200"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "21.2R3-S4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "21.3R3-S4",
"status": "affected",
"version": "21.3",
"versionType": "custom"
},
{
"lessThan": "21.4R3-S3",
"status": "affected",
"version": "21.4",
"versionType": "custom"
},
{
"lessThan": "22.1R3-S1",
"status": "affected",
"version": "22.1",
"versionType": "custom"
},
{
"lessThan": "22.2R2-S2, 22.2R3",
"status": "affected",
"version": "22.2",
"versionType": "custom"
},
{
"lessThan": "22.3R1-S2, 22.3R2",
"status": "affected",
"version": "22.3",
"versionType": "custom"
},
{
"lessThan": "22.4R1-S1, 22.4R2",
"status": "affected",
"version": "22.4",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-04-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by an attacker on the local broadcast domain. Packets routed to the device are unable to trigger this crash. This issue affects Juniper Networks Junos OS on JRR200: All versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S4; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S2, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2; 22.4 versions prior to 22.4R1-S1, 22.4R2."
}
],
"exploits": [
{
"lang": "en",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-17T00:00:00.000Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"url": "https://supportportal.juniper.net/JSA70594"
}
],
"solutions": [
{
"lang": "en",
"value": "The following software releases have been updated to resolve this specific issue: Junos OS 21.2R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S2, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1-S1, 22.4R2, 23.1R1, and all subsequent releases.\n"
}
],
"source": {
"advisory": "JSA70594",
"defect": [
"1677503"
],
"discovery": "USER"
},
"title": "Junos OS: JRR200: Kernel crash upon receipt of a specific packet",
"workarounds": [
{
"lang": "en",
"value": "Limit direct access to the device to only from trusted hosts and administrators.\n"
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2023-28970",
"datePublished": "2023-04-17T00:00:00.000Z",
"dateReserved": "2023-03-29T00:00:00.000Z",
"dateUpdated": "2025-02-06T14:36:49.995Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28965 (GCVE-0-2023-28965)
Vulnerability from cvelistv5 – Published: 2023-04-17 00:00 – Updated: 2025-02-06 14:38
VLAI
EPSS
VEX
Title
Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service
Summary
An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a Denial of Service. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. Storm control monitors the level of applicable incoming traffic and compares it with the level specified. If the combined level of the applicable traffic exceeds the specified level, the switch drops packets for the controlled traffic types. This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-06 14:38 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Juniper Networks | Junos OS |
Affected:
unspecified , < 19.3R3-S7
(custom)
Affected: 19.4 , < 19.4R3-S11 (custom) Affected: 20.2 , < 20.2R3-S6 (custom) Affected: 20.4 , < 20.4R3-S5 (custom) Affected: 21.1 , < 21.1R3-S4 (custom) Affected: 21.2 , < 21.2R3-S3 (custom) Affected: 21.3 , < 21.3R3 (custom) Affected: 21.4 , < 21.4R2 (custom) |
Date Public
2023-04-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:51:39.130Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://supportportal.juniper.net/JSA70589"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28965",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-06T14:38:52.939934Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-06T14:38:56.341Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"QFX10002"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "19.3R3-S7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "19.4R3-S11",
"status": "affected",
"version": "19.4",
"versionType": "custom"
},
{
"lessThan": "20.2R3-S6",
"status": "affected",
"version": "20.2",
"versionType": "custom"
},
{
"lessThan": "20.4R3-S5",
"status": "affected",
"version": "20.4",
"versionType": "custom"
},
{
"lessThan": "21.1R3-S4",
"status": "affected",
"version": "21.1",
"versionType": "custom"
},
{
"lessThan": "21.2R3-S3",
"status": "affected",
"version": "21.2",
"versionType": "custom"
},
{
"lessThan": "21.3R3",
"status": "affected",
"version": "21.3",
"versionType": "custom"
},
{
"lessThan": "21.4R2",
"status": "affected",
"version": "21.4",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"value": "The following provides an example of an affected configuration: \n\n set interfaces xe-0/0/14:0 unit 0 family ethernet-switching interface-mode trunk\n set interfaces xe-0/0/14:0 unit 0 family ethernet-switching vlan members v100\n set interfaces xe-0/0/14:0 unit 0 family ethernet-switching storm-control storm\n set forwarding-options storm-control-profiles default all\n set forwarding-options storm-control-profiles storm all bandwidth-level 100\n set forwarding-options storm-control-profiles storm action-shutdown\n set protocols lldp interface all\n set vlans v100 vlan-id 100"
}
],
"datePublic": "2023-04-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a Denial of Service. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. Storm control monitors the level of applicable incoming traffic and compares it with the level specified. If the combined level of the applicable traffic exceeds the specified level, the switch drops packets for the controlled traffic types. This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2."
}
],
"exploits": [
{
"lang": "en",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-17T00:00:00.000Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"url": "https://supportportal.juniper.net/JSA70589"
}
],
"solutions": [
{
"lang": "en",
"value": "The following software releases have been updated to resolve this specific issue: 19.3R3-S7, 19.4R3-S11, 20.2R3-S6, 20.4R3-S5, 21.1R3-S4, 21.2R3-S3, 21.3R3, 21.4R2, 22.1R1 and all subsequent releases.\n"
}
],
"source": {
"advisory": "JSA70589",
"defect": [
"1619359"
],
"discovery": "INTERNAL"
},
"title": "Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service",
"workarounds": [
{
"lang": "en",
"value": "There are no known workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2023-28965",
"datePublished": "2023-04-17T00:00:00.000Z",
"dateReserved": "2023-03-29T00:00:00.000Z",
"dateUpdated": "2025-02-06T14:38:56.341Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28959 (GCVE-0-2023-28959)
Vulnerability from cvelistv5 – Published: 2023-04-17 00:00 – Updated: 2025-03-03 19:31
VLAI
EPSS
VEX
Title
Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets
Summary
An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on QFX10002 allows an unauthenticated, adjacent attacker on the local broadcast domain sending a malformed packet to the device, causing all PFEs other than the inbound PFE to wedge and to eventually restart, resulting in a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by sending a specific malformed packet to the device. Transit traffic does not trigger this issue. An indication of this issue occurring can be seen through the following log messages: fpc0 expr_hostbound_packet_handler: Receive pe 73? fpc0 Cmerror Op Set: PE Chip: PE0[0]: PGQ:misc_intr: 0x00000020: Enqueue of a packet with out-of-range VOQ in 192K-VOQ mode (URI: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL) The logs list below can also be observed when this issue occurs fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107), scope: pfe, category: functional, severity: major, module: PE Chip, type: Description for PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107) in module: PE Chip with scope: pfe category: functional level: major fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a), scope: pfe, category: functional, severity: fatal, module: PE Chip, type: Description for PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal fpc0 Performing action disable-pfe for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.1R3-S10; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-12 19:29 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Juniper Networks | Junos OS |
Affected:
unspecified , < 19.1R3-S10
(custom)
Affected: 19.4 , < 19.4R3-S11 (custom) Affected: 20.2 , < 20.2R3-S7 (custom) Affected: 20.4 , < 20.4R3-S6 (custom) Affected: 21.1 , < 21.1R3-S4 (custom) Affected: 21.2 , < 21.2R3-S4 (custom) Affected: 21.3 , < 21.3R3-S3 (custom) Affected: 21.4 , < 21.4R3-S2 (custom) Affected: 22.1 , < 22.1R3-S1 (custom) Affected: 22.2 , < 22.2R2-S1, 22.2R3 (custom) Affected: 22.3 , < 22.3R1-S2, 22.3R2 (custom) |
Date Public
2023-04-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:51:38.983Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://supportportal.juniper.net/JSA70584"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28959",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-12T19:29:42.666704Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-03T19:31:31.592Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"QFX10002"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "19.1R3-S10",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "19.4R3-S11",
"status": "affected",
"version": "19.4",
"versionType": "custom"
},
{
"lessThan": "20.2R3-S7",
"status": "affected",
"version": "20.2",
"versionType": "custom"
},
{
"lessThan": "20.4R3-S6",
"status": "affected",
"version": "20.4",
"versionType": "custom"
},
{
"lessThan": "21.1R3-S4",
"status": "affected",
"version": "21.1",
"versionType": "custom"
},
{
"lessThan": "21.2R3-S4",
"status": "affected",
"version": "21.2",
"versionType": "custom"
},
{
"lessThan": "21.3R3-S3",
"status": "affected",
"version": "21.3",
"versionType": "custom"
},
{
"lessThan": "21.4R3-S2",
"status": "affected",
"version": "21.4",
"versionType": "custom"
},
{
"lessThan": "22.1R3-S1",
"status": "affected",
"version": "22.1",
"versionType": "custom"
},
{
"lessThan": "22.2R2-S1, 22.2R3",
"status": "affected",
"version": "22.2",
"versionType": "custom"
},
{
"lessThan": "22.3R1-S2, 22.3R2",
"status": "affected",
"version": "22.3",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-04-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on QFX10002 allows an unauthenticated, adjacent attacker on the local broadcast domain sending a malformed packet to the device, causing all PFEs other than the inbound PFE to wedge and to eventually restart, resulting in a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by sending a specific malformed packet to the device. Transit traffic does not trigger this issue. An indication of this issue occurring can be seen through the following log messages: fpc0 expr_hostbound_packet_handler: Receive pe 73? fpc0 Cmerror Op Set: PE Chip: PE0[0]: PGQ:misc_intr: 0x00000020: Enqueue of a packet with out-of-range VOQ in 192K-VOQ mode (URI: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL) The logs list below can also be observed when this issue occurs fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107), scope: pfe, category: functional, severity: major, module: PE Chip, type: Description for PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107) in module: PE Chip with scope: pfe category: functional level: major fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a), scope: pfe, category: functional, severity: fatal, module: PE Chip, type: Description for PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal fpc0 Performing action disable-pfe for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.1R3-S10; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2."
}
],
"exploits": [
{
"lang": "en",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-17T00:00:00.000Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"url": "https://supportportal.juniper.net/JSA70584"
}
],
"solutions": [
{
"lang": "en",
"value": "The following software releases have been updated to resolve this specific issue: 19.4R3-S11, 20.2R3-S7, 20.4R3-S6, 21.1R3-S4, 21.2R3-S4, 21.3R3-S3, 21.4R3-S2, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1, and all subsequent releases.\n"
}
],
"source": {
"advisory": "JSA70584",
"defect": [
"1686793"
],
"discovery": "USER"
},
"title": "Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets",
"workarounds": [
{
"lang": "en",
"value": "There are no available workarounds for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2023-28959",
"datePublished": "2023-04-17T00:00:00.000Z",
"dateReserved": "2023-03-29T00:00:00.000Z",
"dateUpdated": "2025-03-03T19:31:31.592Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-22413 (GCVE-0-2023-22413)
Vulnerability from cvelistv5 – Published: 2023-01-12 00:00 – Updated: 2025-04-07 15:31
VLAI
EPSS
VEX
Title
Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets
Summary
An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when specific IPv4 packets are processed by an IPsec6 tunnel, the Multiservices PIC Management Daemon (mspmand) process will core and restart. This will lead to FPC crash. Traffic flow is impacted while mspmand restarts. Continued receipt of these specific packets will cause a sustained Denial of Service (DoS) condition. This issue only occurs if an IPv4 address is not configured on the multiservice interface. This issue affects: Juniper Networks Junos OS on MX Series All versions prior to 19.4R3-S9; 20.1 version 20.1R3-S5 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-04-07 14:54 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions
- Denial of Service (DoS)
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://kb.juniper.net/JSA70209 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Juniper Networks | Junos OS |
Affected:
unspecified , < 19.4R3-S9
(custom)
Affected: 20.2 , < 20.2R3-S5 (custom) Affected: 20.3 , < 20.3R3-S5 (custom) Affected: 20.4 , < 20.4R3-S4 (custom) Affected: 21.1 , < 21.1R3-S3 (custom) Affected: 21.2 , < 21.2R3-S1 (custom) Affected: 21.3 , < 21.3R3 (custom) Affected: 21.4 , < 21.4R2-S1, 21.4R3 (custom) Affected: 22.1 , < 22.1R2 (custom) Affected: 20.1R3-S5 , < 20.1* (custom) |
Date Public
2023-01-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:07:06.570Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://kb.juniper.net/JSA70209"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-22413",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-07T14:54:53.065196Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-04-07T15:31:47.697Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"MX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "19.4R3-S9",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "20.2R3-S5",
"status": "affected",
"version": "20.2",
"versionType": "custom"
},
{
"lessThan": "20.3R3-S5",
"status": "affected",
"version": "20.3",
"versionType": "custom"
},
{
"lessThan": "20.4R3-S4",
"status": "affected",
"version": "20.4",
"versionType": "custom"
},
{
"lessThan": "21.1R3-S3",
"status": "affected",
"version": "21.1",
"versionType": "custom"
},
{
"lessThan": "21.2R3-S1",
"status": "affected",
"version": "21.2",
"versionType": "custom"
},
{
"lessThan": "21.3R3",
"status": "affected",
"version": "21.3",
"versionType": "custom"
},
{
"lessThan": "21.4R2-S1, 21.4R3",
"status": "affected",
"version": "21.4",
"versionType": "custom"
},
{
"lessThan": "22.1R2",
"status": "affected",
"version": "22.1",
"versionType": "custom"
},
{
"lessThan": "20.1*",
"status": "affected",
"version": "20.1R3-S5 ",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"value": "The following minimal IPsec VPN configuration is required for this issue to be present.\n\n [set services ipsec-vpn rule vpn_rule_ms_4_0_01 term term11 then dynamic ike-policy ike_policy_ms_4_0_0]\n [set services ipsec-vpn rule vpn_rule_ms_4_0_01 term term11 then dynamic ipsec-policy ipsec_policy_ms_4_0_0]\n [set services service-set ipsec_ss_ms_4_0_01 ipsec-vpn-options local-gateway 10.0.1.1]\n [set services service-set ipsec_ss_ms_4_0_01 ipsec-vpn-rules vpn_rule_ms_4_0_01]"
}
],
"datePublic": "2023-01-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when specific IPv4 packets are processed by an IPsec6 tunnel, the Multiservices PIC Management Daemon (mspmand) process will core and restart. This will lead to FPC crash. Traffic flow is impacted while mspmand restarts. Continued receipt of these specific packets will cause a sustained Denial of Service (DoS) condition. This issue only occurs if an IPv4 address is not configured on the multiservice interface. This issue affects: Juniper Networks Junos OS on MX Series All versions prior to 19.4R3-S9; 20.1 version 20.1R3-S5 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2."
}
],
"exploits": [
{
"lang": "en",
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"description": "Denial of Service (DoS)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-01-12T00:00:00.000Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"url": "https://kb.juniper.net/JSA70209"
}
],
"solutions": [
{
"lang": "en",
"value": "The following software releases have been updated to resolve this specific issue: 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, 21.2R3-S1, 21.3R3, 21.4R3, 22.1R2, 22.2R1, and all subsequent releases.\n"
}
],
"source": {
"advisory": "JSA70209",
"defect": [
"1658671"
],
"discovery": "USER"
},
"title": "Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets",
"workarounds": [
{
"lang": "en",
"value": "In order to avoid this issue, configure a valid IPv4 address on the multiservice interface."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2023-22413",
"datePublished": "2023-01-12T00:00:00.000Z",
"dateReserved": "2022-12-27T00:00:00.000Z",
"dateUpdated": "2025-04-07T15:31:47.697Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-5563 (GCVE-0-2023-5563)
Vulnerability from cvelistv5 – Published: 2023-10-12 23:11 – Updated: 2024-09-17 17:08
VLAI
EPSS
VEX
Summary
The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-17 17:08 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zephyrproject-rtos | Zephyr |
Affected:
3.3 , ≤ 3.4
(git)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:59:44.836Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-98mc-rj7w-7rpv"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-5563",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-17T17:08:27.283979Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-17T17:08:43.494Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "Zephyr",
"product": "Zephyr",
"repo": "https://github.com/zephyrproject-rtos/zephyr",
"vendor": "zephyrproject-rtos",
"versions": [
{
"lessThanOrEqual": "3.4",
"status": "affected",
"version": "3.3",
"versionType": "git"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception."
}
],
"value": "The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception."
}
],
"impacts": [
{
"capecId": "CAPEC-74",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-74 Manipulating User State"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": " CWE-703 Improper Check or Handling of Exceptional Conditions The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-12T23:11:18.074Z",
"orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"shortName": "zephyr"
},
"references": [
{
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-98mc-rj7w-7rpv"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"assignerShortName": "zephyr",
"cveId": "CVE-2023-5563",
"datePublished": "2023-10-12T23:11:18.074Z",
"dateReserved": "2023-10-12T22:58:30.695Z",
"dateUpdated": "2024-09-17T17:08:43.494Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-5038 (GCVE-0-2023-5038)
Vulnerability from cvelistv5 – Published: 2024-06-25 02:14 – Updated: 2024-08-02 07:44
VLAI
EPSS
VEX
Title
Unauthenticated DoS
Summary
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-06-26 16:44 UTC
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.hanwhavision.com/wp-content/uploads/2… | vendor-advisory |
Impacted products
46 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hanwha Vision Co., Ltd. | A-Series, Q-Series, PNM-series Camera |
Affected:
Prior to version 1.41.16, Prior to version 2.22.00
|
|
| hanwhavision | ano-l6012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ano-l6022r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | anv-l6012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ano-l6082r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ane-l6012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | anv-l6082r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ano-l7082r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ane-l7012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | anv-l7082r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ano-l7012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | ano-l7022r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | anv-l7012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-c9022rv |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9000qb |
Affected:
0 , < 2.22.01
(custom)
cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-7002vd |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-8082vt |
Affected:
0 , < 2.22.00
(custom)
cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9002vq |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9022v |
Affected:
0 , < 2.22.00
(custom)
cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9031rv |
Affected:
0 , < 2.22.01
(custom)
cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9084qz |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9084rqz |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9085rqz |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9084qz1 |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9084rqz1 |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9085rqz1 |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-9322vqp |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-7082rvd |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:* |
|
| hanwhavision | pnm-12082rvd |
Affected:
0 , < 2.22.02
(custom)
cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:* |
|
| hanwhavision | lno-6072r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnd-6012r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lno-6032r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnv-6032r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnd-6022r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnd-6072r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lno-6022r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnv-6012r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnv-6072r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnd-6032r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lnv-6022r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | lno-6012r |
Affected:
0 , < 1.41.13
(custom)
cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | qnd-6011 |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:* |
|
| hanwhavision | qnd-6012r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:* |
|
| hanwhavision | qnd-6021 |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:* |
|
| hanwhavision | qnd-6022r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:* |
|
| hanwhavision | qnd-6032r |
Affected:
0 , < 1.41.16
(custom)
cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:* |
Date Public
2024-06-25 02:05
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ane-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l6082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ane-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l7082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-c9022rv",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9000qb",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-7002vd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-8082vt",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.00",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9002vq",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9022v",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.00",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9031rv",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084qz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084rqz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9085rqz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084qz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084rqz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9085rqz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9322vqp",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-7082rvd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-12082rvd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6011",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6021",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l6082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ane-l6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l6082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ane-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l7082r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ano-l7022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "anv-l7012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-c9022rv",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9000qb",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-7002vd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-8082vt",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.00",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9002vq",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9022v",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.00",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9031rv",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084qz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084rqz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9085rqz",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084qz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9084rqz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9085rqz1",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-9322vqp",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-7082rvd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pnm-12082rvd",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "2.22.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6072r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnd-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lnv-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "lno-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.13",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6011",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6012r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6021",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6022r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "qnd-6032r",
"vendor": "hanwhavision",
"versions": [
{
"lessThan": "1.41.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-5038",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-26T16:44:21.978973Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-26T23:04:59.868Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:44:53.791Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "A-Series, Q-Series, PNM-series Camera",
"vendor": "Hanwha Vision Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "Prior to version 1.41.16, Prior to version 2.22.00"
}
]
}
],
"datePublic": "2024-06-25T02:05:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cdiv\u003e\u003cdiv\u003ebadmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds.\u003c/div\u003e\u003c/div\u003e\n\n"
}
],
"value": "badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-25T02:14:06.610Z",
"orgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
"shortName": "Hanwha_Vision"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unauthenticated DoS",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
"assignerShortName": "Hanwha_Vision",
"cveId": "CVE-2023-5038",
"datePublished": "2024-06-25T02:14:06.610Z",
"dateReserved": "2023-09-18T06:00:29.464Z",
"dateUpdated": "2024-08-02T07:44:53.791Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-0397 (GCVE-0-2023-0397)
Vulnerability from cvelistv5 – Published: 2023-01-19 00:00 – Updated: 2025-04-03 17:03
VLAI
EPSS
VEX
Title
DoS: Invalid Initialization in le_read_buffer_size_complete
Summary
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-04-02 15:49 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions (CWE-703)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zephyrproject-rtos | zephyr |
Affected:
unspecified , ≤ v3.2
(custom)
|
Date Public
2023-01-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:10:55.717Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-0397",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-02T15:49:30.912838Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-04-03T17:03:20.150Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "zephyr",
"vendor": "zephyrproject-rtos",
"versions": [
{
"lessThanOrEqual": "v3.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-01-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "Improper Check or Handling of Exceptional Conditions (CWE-703)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-01-19T00:00:00.000Z",
"orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"shortName": "zephyr"
},
"references": [
{
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj"
}
],
"source": {
"defect": [
"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj"
]
},
"title": "DoS: Invalid Initialization in le_read_buffer_size_complete"
}
},
"cveMetadata": {
"assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"assignerShortName": "zephyr",
"cveId": "CVE-2023-0397",
"datePublished": "2023-01-19T00:00:00.000Z",
"dateReserved": "2023-01-19T00:00:00.000Z",
"dateUpdated": "2025-04-03T17:03:20.150Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.